Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier: sLmcCKG+Q0PixuHbPVYQZAP6rBZJY61TulpsAm+AZ/0=
Subject key identifier: 3C:E0:49:F5:26:02:DD:FF:F7:51:D0:67:B2:1B:39:3C:0B:DE:16:54
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer: /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial: 0194BBCDDFA84031E2511712FF4E26A956ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: QGT53h-2hxBk0k4Jw78uciWl9dA.roa (hash: akLh8pkZ4w977a8rKjeaAAowK45K2au7I0qcNtbtusE=)
2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: YMoQH6mOkQcwEgH0ymFNoGl3Qw3m86UDbw1jpsDF6rY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:a8:40:31:e2:51:17:12:ff:4e:26:a9:56:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=3ce049f52602ddfff751d067b21b393c0bde1654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:00:db:0b:d4:f6:41:94:80:4c:3a:48:a9:
77:f6:4b:86:6a:2f:b2:2b:b6:86:49:ce:90:0d:80:
b3:24:52:d1:bf:ff:3d:4f:dc:ce:84:86:31:d1:7b:
b3:08:f3:df:ed:9c:90:bb:82:cf:8d:83:a3:f6:7f:
e9:88:4e:94:8d:f6:45:02:4f:bd:89:42:d8:5a:59:
39:00:28:34:e0:d6:aa:3f:a0:2e:39:6c:ae:c3:72:
f1:1d:4b:64:d8:da:65:9c:af:40:3a:d2:3a:a6:71:
5b:66:1d:df:43:7c:98:d0:08:99:35:f5:7f:0d:e4:
16:83:5f:ad:57:4d:59:1d:1c:24:d1:b0:e8:39:f1:
22:a6:e4:93:91:61:55:aa:9d:55:ab:6b:c5:11:42:
2b:14:fc:de:64:ef:d4:6a:02:d2:28:e6:e0:53:20:
f4:f7:ae:78:3d:43:a1:d2:13:17:13:7d:d2:5f:a2:
85:a9:13:40:50:99:d1:c8:ae:41:3c:30:b5:82:51:
ef:9e:15:4e:72:42:8c:9a:f1:ab:50:d5:84:c3:92:
1e:eb:4d:5d:3d:6b:b8:b1:08:81:63:db:5a:4e:57:
4b:c3:4a:b9:b7:47:f3:2e:3d:58:54:23:86:ec:23:
6b:12:98:ef:e9:7e:35:17:9b:ca:ed:48:39:06:a3:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:49:F5:26:02:DD:FF:F7:51:D0:67:B2:1B:39:3C:0B:DE:16:54
X509v3 Authority Key Identifier:
keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4b:12:9c:ae:e1:13:79:80:ea:6a:99:98:b1:a2:17:3e:5a:
f7:29:2c:2a:3b:69:71:57:5d:1e:9b:6e:b9:73:7a:ef:23:05:
62:f8:a1:e4:fb:97:dd:8b:e0:b0:53:f9:62:0e:9b:92:ed:14:
7e:54:73:56:f3:26:9f:b0:99:dc:64:47:87:ba:a8:af:24:99:
f5:ef:9a:ee:a3:05:67:d7:f5:ae:04:b4:06:61:1c:41:69:41:
76:dd:0f:dc:bf:75:48:fe:53:88:f5:2f:65:42:2e:c0:b3:f7:
91:c3:2e:23:8f:13:b5:a7:cd:fc:0d:bc:89:1f:1b:d4:5a:e8:
ea:ab:f9:b6:0d:ee:f3:62:11:d2:f8:7f:45:fb:2c:a4:c5:ea:
6c:2d:8b:fa:f7:f0:d5:a3:0e:36:a5:a9:d7:d0:e9:a2:d8:71:
1e:d7:ad:76:3a:54:ba:7d:92:76:1d:86:6a:88:22:6d:96:ce:
98:4c:ee:66:82:e9:fe:79:4b:83:3e:b6:af:56:3c:7c:e9:c4:
aa:00:d3:c3:0a:49:83:55:ba:2c:ad:2e:66:12:fb:4b:1a:3e:
80:01:25:2e:96:30:02:e7:9d:22:05:a5:64:df:d9:8e:bf:1d:
27:61:6d:1c:9b:89:11:4c:b1:cf:3e:d7:a1:8d:0d:39:b7:27:
46:44:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client