Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: WfdPzeE7C+EpQSwRK0rCTLxdHIA5ufrlq/3IaaNwx3c=
Subject key identifier: C0:20:BF:75:B8:C6:65:64:0B:A8:4E:D9:BA:4B:A8:EA:C2:1D:B1:12
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 0194BBCE89399DD98A57F2974C3021C457E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 115A
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: B7T3sZebBoQYg5x0RYsPBj23iEo.roa (hash: O9yZ4KZ+ahHkW7NK8lCiaskHOdR7GD8prEJOvXc4vRI=)
2: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: HTHvfSN4kintejDpHQo4+QTYgP96ZaHViBIO80M3lRk=)
3: swm48vI840zUfl2DaxMs8hbeLoo.roa (hash: JjFou/0kBbJgWy4DCqB6G2CRT7ZKW8RECYymrqJxYxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:39:9d:d9:8a:57:f2:97:4c:30:21:c4:57:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=c020bf75b8c665640ba84ed9ba4ba8eac21db112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:75:ab:3f:05:49:b9:c4:c0:e8:f9:a7:29:
7c:8d:4c:e0:99:6b:7d:c8:97:ee:1a:36:67:d5:63:
59:6e:bf:0d:c4:ce:0c:02:c4:1e:76:e6:9a:91:55:
70:d6:5d:7d:1e:45:3b:9f:c6:1f:8f:29:e2:b8:16:
9b:ef:71:26:84:9b:c8:28:8f:02:5f:db:85:d1:87:
b0:5b:9d:f1:20:f6:f2:4c:ec:7c:79:89:6b:0c:d6:
e3:0c:6c:41:ae:6f:f4:5d:fa:4c:39:0e:bf:2a:96:
39:5e:04:90:c4:eb:89:c2:d7:3f:f7:57:48:4f:ac:
6c:31:e8:67:57:7c:b5:f9:26:e1:5b:d1:06:c2:a3:
3a:09:a4:f0:b4:b9:55:21:53:b8:a2:37:97:e7:49:
df:9d:d6:28:82:a7:76:9b:51:43:81:50:96:cd:fa:
e7:c5:30:be:e2:fe:fd:66:9b:a4:f9:e4:7b:43:93:
05:9e:dd:43:cf:4a:d0:8b:06:83:fd:6a:7b:f6:81:
ef:4e:1d:bb:e8:fe:18:18:a2:ff:04:c6:67:e6:cb:
ac:a5:78:9b:35:29:3c:a7:3d:d7:cc:89:3c:61:ce:
cf:87:7f:52:55:fb:af:f6:05:6f:69:9c:61:76:88:
5e:dd:76:52:bb:88:39:92:64:c8:cf:00:7c:22:cb:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:BF:75:B8:C6:65:64:0B:A8:4E:D9:BA:4B:A8:EA:C2:1D:B1:12
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:05:af:b6:f3:96:3f:ec:a8:c9:61:71:0d:fa:2f:a4:af:
8f:53:b6:05:2b:42:3c:6c:4b:5b:df:8c:a3:e1:a4:d8:2c:20:
e1:40:70:ec:66:a1:fc:8f:55:e3:fd:fe:11:35:75:70:a0:fd:
9c:a3:a6:95:77:66:cf:94:00:11:04:9e:e9:79:8d:70:a6:99:
09:45:73:1a:5a:4e:e3:97:ed:a7:a0:4e:71:8b:72:74:02:ee:
1b:09:8a:20:5d:ba:db:de:b7:5a:89:40:5a:4f:63:f3:20:30:
60:9c:02:32:eb:27:2d:97:3e:8a:87:f4:a0:99:3e:e6:b4:36:
23:03:1d:7f:83:78:06:26:e0:32:de:46:bc:79:97:30:3a:47:
25:fa:f4:f5:6d:ec:2a:99:ec:35:f1:ad:58:ff:f8:a9:09:ed:
42:8f:fb:3e:85:47:56:0c:7f:74:69:03:02:3f:f2:55:db:8d:
46:7d:61:d3:95:dc:d1:04:e9:d6:ea:83:f7:2d:91:1b:45:bc:
c0:c4:fa:24:7c:20:e3:b0:00:ed:cd:51:ce:43:57:5f:c6:56:
92:f6:9a:f6:78:e6:3c:86:d3:1b:47:5d:87:78:16:fe:0c:a5:
8d:85:50:ff:9b:84:e3:0f:34:4e:2b:d0:49:78:87:c9:10:5b:
96:68:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:29 2025 by rpki-client