Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: huN+JpMtSnhVxj+Z/GBZ4n3ZCEZ8fC1ojqHaFPbKpv4=
Subject key identifier: 9C:5A:3A:E9:75:85:DB:B2:AA:90:A6:EB:EB:63:44:29:FC:CB:80:E2
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 0194BD174F3026A5802B61173262EE14C3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 01D7
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: IO1iOW6jPW7bWjXLAND0o4P8tU2sY9xwwHyTTxFih0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4f:30:26:a5:80:2b:61:17:32:62:ee:14:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=9c5a3ae97585dbb2aa90a6ebeb634429fccb80e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:8e:b9:7c:eb:cc:e1:53:ee:f6:8b:2d:54:
ea:09:b2:cc:74:e2:33:eb:36:42:79:9d:4c:71:0c:
7a:f2:01:4c:c6:78:a0:b1:1b:b1:36:f9:86:74:1f:
bd:95:1f:1c:e6:ff:bd:11:e4:a6:f4:e2:e2:75:db:
0f:ae:8b:87:97:48:77:25:2f:74:d2:1e:75:f7:59:
8a:b2:d0:7f:88:77:77:bd:af:4b:67:31:29:02:27:
12:a4:93:47:20:26:9f:ee:04:67:2d:78:53:ac:46:
c0:70:ea:09:b3:03:e0:7c:b9:ec:d0:d0:67:c0:e9:
7a:8a:31:58:1f:34:0b:8c:d8:4b:dd:07:9f:12:35:
85:86:66:fc:13:8d:b1:9d:f6:6f:ef:13:e7:a3:df:
81:d0:9d:c3:47:83:6f:c5:ba:a0:af:35:8e:dd:a9:
3e:57:49:ea:a7:fe:f2:a1:47:d3:d4:8c:a3:94:2c:
73:e1:25:00:b2:2b:98:9c:e5:94:86:ab:88:4c:5a:
71:19:7f:84:de:d9:25:5e:87:fe:58:4f:9e:47:cc:
d5:69:6d:0e:38:2f:18:24:a9:eb:fd:e7:b8:18:d3:
f6:28:83:6c:c0:96:a3:b1:81:ba:d9:fe:4c:e2:f1:
39:3f:1d:31:75:5a:59:a0:15:c1:e4:5f:2c:d7:3d:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5A:3A:E9:75:85:DB:B2:AA:90:A6:EB:EB:63:44:29:FC:CB:80:E2
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b5:9f:f3:4b:9e:1d:aa:0b:f8:cf:5f:dd:15:10:f0:05:9d:
ad:50:7c:d2:bd:1e:aa:ca:f1:d3:1d:b6:e8:1e:e4:08:73:69:
ae:a0:a4:35:73:b0:18:70:46:b9:b6:66:62:57:69:51:81:58:
37:d9:e7:a9:76:6f:4b:63:ec:96:d0:03:e9:3c:33:be:d5:39:
58:d8:25:b9:9b:30:89:a0:aa:1c:8f:c3:9e:8f:72:f3:7f:6e:
ce:47:ee:4b:85:e9:66:d1:cc:3f:47:6a:bd:48:cc:88:9f:59:
08:16:ee:63:eb:a4:75:45:49:a5:83:0c:d7:b5:e7:3c:58:7d:
0b:fe:77:2d:2a:b1:d8:66:6b:8d:84:45:be:76:b2:94:f5:f0:
8b:70:5a:44:4b:4a:b0:46:78:e9:72:c4:58:bf:6a:38:72:87:
c6:47:36:52:00:6d:4d:df:61:24:9f:90:91:32:99:81:78:05:
98:da:26:fc:1a:9f:70:1f:43:d2:2a:63:cc:87:34:cc:82:34:
da:1c:d2:d9:0f:e6:77:f8:30:b5:ff:f5:25:e1:f4:ce:b2:c5:
63:b0:84:42:3e:83:0b:6a:d4:f1:3d:79:7f:de:01:14:e8:ff:
26:0d:50:7d:ab:b6:89:63:b1:13:a6:f9:9d:2b:19:80:8d:1f:
13:ec:0a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:48 2025 by rpki-client