Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: 9NseST/b8AzdbMc1Hm4IeCqWs7izPt4DJTpm0G7n4E8=
Subject key identifier: D9:FF:8C:90:80:AB:D4:47:83:70:40:AF:AA:7B:2E:58:37:96:A8:87
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 0194BCAA2813FAFE392E175F559B497787F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 12EE
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: JZSLW2Ya11RM4cZOohwIKE1pjlHwcTkjutPpMnzI/AM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:13:fa:fe:39:2e:17:5f:55:9b:49:77:87:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=d9ff8c9080abd447837040afaa7b2e583796a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:fa:2d:8e:ef:29:77:e8:71:4a:9f:d4:e2:
ba:a1:34:6a:43:92:30:64:e1:4b:a5:dc:dc:65:cd:
03:e7:00:9c:ef:4c:31:d4:97:5e:f8:6b:09:c1:0e:
95:f7:44:c4:0d:19:09:af:f2:7d:9a:99:15:4c:61:
a9:1b:60:62:e1:9d:a4:21:20:3e:06:87:4c:b3:cb:
ca:26:40:6a:11:4a:b8:62:b7:2e:e9:c5:54:0a:1c:
3a:36:79:38:3f:ca:44:f8:51:fc:6f:55:83:b0:bf:
96:b6:e5:24:42:17:01:a4:c5:b8:2b:e6:ec:a0:f5:
19:22:5a:4c:17:c2:fa:ec:ab:ed:22:88:67:ac:71:
7d:01:f4:16:5b:f0:da:10:43:be:61:97:c7:e0:83:
dd:7b:09:50:9c:0c:7a:d8:a8:cd:fc:92:7e:ba:ba:
2d:81:93:2a:f4:28:c1:76:d1:9a:bb:f0:9f:c8:58:
ea:33:22:a7:97:a2:c8:b2:82:73:5f:25:fb:5a:5f:
8e:d1:10:2c:58:d4:d6:75:91:51:2c:c2:bc:e7:b3:
27:60:48:49:ad:ce:33:66:6e:b3:ba:3d:c5:b0:47:
9f:74:fa:07:63:b9:33:2b:51:ec:f4:9d:78:db:57:
f7:8e:25:44:d0:46:93:19:84:0c:b8:98:a1:ab:52:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:8C:90:80:AB:D4:47:83:70:40:AF:AA:7B:2E:58:37:96:A8:87
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ba:99:9c:8b:b1:ee:55:cd:83:83:1b:91:c6:05:b2:f2:83:
f4:a9:44:69:d5:ec:2a:03:0d:05:f6:35:6f:44:a1:db:e0:34:
28:d4:e1:2c:dc:d9:06:c4:19:02:6e:ee:f3:1f:b0:10:0f:3d:
51:f0:14:b4:a1:9e:c7:5c:64:2e:e6:fd:77:f3:c4:45:1c:33:
e9:64:fd:73:0f:7d:50:94:7c:4b:f7:71:1d:63:95:0d:56:2a:
4e:6d:8c:9a:4c:86:2d:33:03:f2:17:d0:73:0f:45:66:36:8d:
65:a0:7d:83:fc:69:92:10:64:3b:24:26:9b:e8:1b:ad:eb:08:
22:bb:16:ba:b9:6e:40:b3:cb:de:3f:5f:fe:59:51:e3:64:99:
91:e1:ed:55:cf:71:0d:d2:fe:04:c6:3d:48:b9:b6:50:c8:d7:
00:e1:3b:06:4c:6a:03:79:f9:d4:73:83:35:08:16:e4:12:34:
f2:c3:e8:e1:c4:9d:d8:e9:d8:f6:3a:f2:7b:6b:49:28:c4:b6:
08:0c:8b:85:af:18:8b:a6:8e:5f:e1:57:09:84:34:1c:84:f6:
65:f4:dd:56:2a:7b:17:4a:a0:5e:4e:05:22:26:a2:14:76:f5:
d4:a4:fb:c8:d5:bf:b9:78:8f:82:46:8f:c7:c4:61:60:18:0e:
d0:d9:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:17 2025 by rpki-client