Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: uahvVQD0SmLJB+9Ja6dY/HOnMhk79bfeiyJsPD4B8mM=
Subject key identifier: 05:88:3C:87:C8:CB:5D:3D:8B:E2:FF:87:A9:E4:71:58:5E:B5:E3:6D
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0194BCA9A0A8250799DF40DBFFF3C7E1C443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0797
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: PsVGzz2MeHkvD7v9c1HKURei7IDQ0JRxiwqW/vHnXrM=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a0:a8:25:07:99:df:40:db:ff:f3:c7:e1:c4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=05883c87c8cb5d3d8be2ff87a9e471585eb5e36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:af:64:b5:b9:a6:b3:76:a5:60:e3:83:e1:
11:0e:26:7a:99:5d:27:43:99:40:d5:04:ac:24:75:
4b:f2:94:08:85:71:c8:37:11:87:f5:ba:ef:64:2b:
ef:96:24:42:03:c6:2b:ac:1f:90:ce:0d:3f:a9:ef:
23:54:67:8f:64:00:a1:e1:19:93:da:cb:ef:67:85:
56:af:1c:82:75:ff:9b:d8:0e:45:5b:10:3b:4b:d1:
93:d8:24:33:5e:40:8a:26:07:ed:30:6d:27:f5:ee:
2d:df:1c:c1:7a:07:3e:d9:1c:65:ad:94:ed:97:63:
fb:bd:29:75:96:f1:7c:21:41:c2:00:f8:23:fc:e5:
d1:4e:6a:47:ca:72:d8:7e:a4:f5:e2:80:e0:f3:08:
45:c7:20:d9:49:78:bb:0b:3f:f7:69:78:1a:63:21:
0b:c9:fb:58:12:ee:65:10:0f:2e:40:fc:00:2b:aa:
3b:90:cb:17:aa:f9:73:12:17:8d:d7:29:39:5a:c8:
aa:c7:15:0a:2e:7f:bc:c9:75:05:57:e8:d3:3f:34:
63:ea:16:59:65:2a:57:4b:0d:ea:d3:ff:ec:5d:94:
a0:7d:98:32:55:d0:d5:4a:fd:a8:8d:a5:58:73:e8:
41:50:49:6c:bc:63:10:52:a8:6e:be:89:24:98:d1:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:3C:87:C8:CB:5D:3D:8B:E2:FF:87:A9:E4:71:58:5E:B5:E3:6D
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:08:18:f6:b7:3f:ed:de:ce:b3:ef:f2:10:66:45:12:ad:4e:
b8:cf:d7:42:36:18:f7:df:20:63:ee:13:7a:0d:93:ad:62:17:
8e:71:21:54:af:24:04:75:72:c2:47:a6:e8:c7:8e:46:4c:5c:
8a:5f:74:44:a9:80:3b:fd:d6:c1:c0:0a:42:bf:68:c7:fe:63:
c7:7b:f2:97:11:08:2c:9f:66:20:ad:c9:ec:4a:d2:0f:6e:61:
29:33:01:05:e3:42:3f:e0:c3:56:1d:68:0f:47:8f:02:63:f2:
f7:83:95:d5:e2:ca:92:0b:32:2b:73:0e:1c:ce:4a:4c:6e:76:
f3:c5:e9:96:ef:d3:a7:02:ae:12:a6:ce:77:f1:f0:e3:71:c5:
e9:c8:1d:71:82:a3:dd:af:4f:c1:d4:c7:84:88:e4:69:67:be:
e5:c5:77:2c:e2:bc:b8:37:a3:5e:22:ba:63:fb:04:3a:7c:fa:
38:27:97:f6:f8:4f:19:d5:c7:09:cf:b5:ab:30:da:ed:e3:68:
80:be:9f:be:41:57:1a:f3:84:b4:39:ee:54:d2:9e:d2:f0:e9:
9f:fb:3e:4c:7e:c8:25:b4:0b:3f:5a:b2:9c:8a:64:8d:cd:4d:
85:a3:30:11:82:e2:36:7f:1b:b5:c6:5a:e8:d6:85:29:67:1e:
d3:80:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:44 2025 by rpki-client