Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier: BcgJb9Ksj9kMLm70HKLilQlx7jApH4HqPfRDTYMPBpw=
Subject key identifier: 3A:BB:98:C8:91:F7:8B:FF:A4:73:92:C6:F6:98:FF:C6:24:43:DE:2B
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 0194BCAA286696DFFFD5DAA3B62EFD6B38B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number: 1051
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: qANyohOoMkv2o5YJREJtXRY451bwtrT0RdXXg3o9wqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:66:96:df:ff:d5:da:a3:b6:2e:fd:6b:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=3abb98c891f78bffa47392c6f698ffc62443de2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:21:3f:c1:7a:06:f0:a2:e5:a4:02:ee:a8:
6c:9c:d1:9a:f7:0e:14:ce:b5:61:03:68:8c:0c:e7:
84:a2:36:2c:86:25:52:60:2f:4a:c3:a2:80:f3:56:
d2:1c:47:3d:99:3a:db:4e:71:bc:99:3e:3c:35:a7:
b2:a1:8b:85:b2:4f:9e:85:b3:e1:6a:9f:df:bc:71:
e0:cf:b6:fe:b0:11:28:db:3f:d1:43:93:9d:45:db:
06:60:ee:a3:e7:9e:24:9b:92:f4:93:6f:ba:75:af:
dc:dc:56:ff:3a:16:d8:13:cd:84:97:2f:1a:a7:15:
62:ba:58:ec:e3:bd:76:5a:7a:c6:af:fc:a1:e1:4a:
72:44:bb:64:9e:a2:80:03:dc:0e:b4:ba:2d:1a:f4:
3b:fe:40:3d:3c:b3:f1:ce:a4:d0:be:71:be:6f:36:
d2:c7:b3:c2:d2:42:99:01:09:ed:15:9c:0f:0c:5f:
78:f0:b9:ae:e6:b9:1b:55:b2:6f:05:78:ee:3e:44:
32:2b:4d:16:91:ff:42:f2:9c:c0:a3:ed:a1:c3:80:
98:b9:7d:d5:53:9f:db:3f:6e:e8:31:d9:12:6b:8e:
10:d4:e0:53:ee:0d:d1:0d:ad:f6:31:af:d6:29:39:
c4:99:60:e8:56:5e:d0:ca:bf:7a:73:51:54:8d:e6:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:98:C8:91:F7:8B:FF:A4:73:92:C6:F6:98:FF:C6:24:43:DE:2B
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3e:9b:c0:b6:ec:dc:7b:f8:0b:d3:8f:73:26:b9:31:26:29:
0e:a4:f0:3b:59:66:25:42:18:e8:b9:34:b7:6e:5f:35:d9:38:
e1:c5:ee:37:5e:78:05:09:b6:3c:55:5e:c7:6d:a0:2d:8d:4a:
c4:a4:ea:c3:b5:0b:01:25:88:cc:16:24:93:ba:32:61:8b:ea:
67:67:78:c6:87:20:45:5f:60:a6:85:d3:9e:ec:0c:cb:09:2d:
60:bf:17:f2:e2:65:eb:50:33:c4:cf:26:7d:f9:43:30:06:33:
05:08:b3:68:79:db:7f:cb:f0:26:04:b4:d3:f9:29:52:e4:03:
0c:66:33:38:9b:5c:53:a2:30:f1:94:86:dc:5e:2e:1c:35:cc:
f2:8a:8e:65:40:d8:1e:64:9c:08:02:c9:5b:31:c2:56:c6:6c:
e2:37:a1:4a:e0:37:96:58:2c:cd:b6:a7:2f:7e:0f:1b:99:85:
cf:3e:0e:d1:8f:e2:93:24:3d:3c:43:47:42:4b:02:2a:44:2e:
ad:e6:14:b9:de:97:26:a3:86:9d:66:c4:67:c3:f6:3d:88:ec:
d8:c8:40:63:a1:6f:2f:ba:df:4a:99:d3:b6:23:c6:24:49:22:
95:52:89:ad:c7:aa:16:b7:80:44:ae:31:16:cb:16:15:07:ba:
c9:90:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:06 2025 by rpki-client