Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: ZcsZ1to++umNLdHHaStwlXZQT3NEsVNgbA/kvbDMpYo=
Subject key identifier: 71:DC:97:D7:2C:6F:17:3A:79:5E:AB:2F:EE:0E:60:F0:EC:7C:97:A8
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 0194BD176E191A1C5A343411A86C5450B516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: fDjN3b5xL8aSOulksVuBK2wzD4p0aN01cg/ppWbc5lU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:19:1a:1c:5a:34:34:11:a8:6c:54:50:b5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=71dc97d72c6f173a795eab2fee0e60f0ec7c97a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:ea:a5:6c:73:1d:6a:d7:e8:17:74:f2:56:
e7:23:de:19:21:c8:a5:eb:14:e5:93:07:00:77:83:
be:c4:f8:07:93:fc:52:24:74:0e:cb:90:3f:94:70:
63:ad:b0:0f:56:5e:a5:60:20:d0:40:f7:f3:7c:b2:
64:48:64:30:61:55:ea:02:69:50:1e:a5:6f:ee:49:
a7:24:35:d1:87:b4:50:6b:e3:4c:07:bd:62:7a:6e:
86:e2:74:64:8d:62:29:50:89:60:b4:73:72:ed:42:
4d:10:59:18:e7:0f:0b:18:41:50:90:c2:ee:f6:06:
16:83:a9:9f:a0:9e:46:60:68:e4:27:c0:54:c5:d4:
a2:f2:c0:a1:7c:e8:23:17:23:80:50:85:7c:24:1e:
4e:78:2c:cb:6d:e2:ef:83:4d:d5:07:d2:e2:e9:68:
45:6f:8c:ea:77:9d:08:df:ab:ce:b3:9c:82:96:54:
72:dc:a5:4f:58:d0:db:88:83:e3:93:54:66:a3:e8:
99:5e:aa:85:17:4b:21:38:8f:4c:4e:68:bc:bc:30:
8e:0c:e2:3e:e7:ee:cc:2b:ae:4b:fd:9f:2a:7d:ce:
8b:4b:8c:24:26:28:36:aa:24:fc:c1:25:a6:92:95:
f8:0f:99:4a:87:79:4c:dd:7b:bd:24:d8:ee:de:12:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DC:97:D7:2C:6F:17:3A:79:5E:AB:2F:EE:0E:60:F0:EC:7C:97:A8
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ce:08:d0:4a:ce:cc:53:d6:66:9a:02:39:c1:b4:ba:9e:dd:
2f:6b:c5:78:50:a1:ed:ef:83:3e:41:70:55:54:ea:13:0e:de:
d7:6f:07:9f:3e:1d:fd:e8:53:bc:2a:cc:cf:dc:89:a9:8f:ca:
03:1e:46:68:ae:e0:64:4e:ae:43:8c:21:be:80:3e:40:9e:0f:
0c:31:92:04:e9:d9:69:67:b5:36:52:2c:cf:09:1e:32:fd:09:
67:a9:01:b3:fb:0b:f5:66:56:87:0f:9c:51:32:a0:e4:89:44:
38:c3:18:80:bc:02:8f:dc:9b:26:71:03:64:5a:4a:1c:05:3c:
a0:4f:c9:10:cf:c4:8a:39:ce:f5:5b:5b:ac:c1:dd:31:be:da:
3f:7d:48:bf:59:5a:c3:07:a0:60:30:37:44:7b:67:c2:2a:fd:
9f:14:65:e8:59:fb:8c:46:59:ed:9f:eb:09:6c:19:3b:51:f8:
3d:ac:ef:df:87:e5:b7:f1:68:ac:f4:08:08:09:75:a8:25:0a:
41:2e:77:6f:d2:11:2e:0d:b7:8b:cd:af:95:e4:5a:34:51:c8:
85:35:1c:71:2f:55:38:b7:6c:53:2d:9c:42:89:e4:1f:87:61:
64:6d:31:0c:a9:99:61:44:b7:0f:f4:ce:31:67:8b:86:df:8a:
f2:a9:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:38 2025 by rpki-client