Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: e+ngAxE2arun0LDRz1dpx6v231jJZGQDrUA9xJYbNog=
Subject key identifier: C9:3F:CC:84:93:9F:A4:F6:CA:C6:96:24:43:58:AC:2E:B6:9D:39:B5
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 0194BC0505FEAAC85AAFD9CE5CA578BC1AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: BL/1GxEar7zfE2xp3+mloICvWbmVpySOw5eYdLeIeM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:fe:aa:c8:5a:af:d9:ce:5c:a5:78:bc:1a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=c93fcc84939fa4f6cac696244358ac2eb69d39b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:d7:77:71:9a:af:a7:5b:15:4d:e4:62:c7:
8e:1a:13:63:5b:dc:fc:2e:27:0b:16:6f:5d:59:f4:
ba:a2:dc:b5:6e:2e:f4:38:57:c5:ff:20:06:87:c8:
0b:ce:84:06:85:fa:1f:39:9a:25:65:8d:5e:e9:6e:
ca:c4:c6:97:7c:57:d0:c0:21:de:3f:9e:f8:c0:d8:
51:27:66:d0:d6:4c:bb:3d:5e:3d:e5:13:0a:3a:c8:
e3:c4:e3:31:3f:7d:16:89:f3:6e:c3:d2:ad:1d:0a:
e2:69:5e:9f:4b:4f:f1:88:cd:f8:b0:cf:24:be:e4:
66:4c:93:81:15:87:d5:b9:e0:03:33:f2:b4:3a:35:
c1:92:e4:38:2b:09:28:02:f7:55:0c:a8:4b:78:6c:
c4:21:35:b0:f4:00:4f:f7:ba:a4:78:e5:1e:88:c2:
1a:99:e8:c7:bf:24:57:ea:3f:6b:78:21:37:55:f1:
aa:e9:ff:69:ba:4b:cb:b5:d4:6e:b5:9f:13:01:3c:
2a:b3:fd:c1:25:07:6b:ce:3d:5a:d4:9c:b0:46:2b:
76:82:16:10:ae:2f:f0:8b:05:a3:ac:c7:1f:07:ce:
e7:8a:a0:92:8c:9b:f3:08:56:85:56:55:37:ff:ad:
64:c6:25:fd:89:72:8f:73:d9:51:f8:6f:45:fb:81:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:CC:84:93:9F:A4:F6:CA:C6:96:24:43:58:AC:2E:B6:9D:39:B5
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0b:c7:9f:84:89:d6:35:8a:96:a5:53:a0:ca:b5:df:78:36:
15:e7:3d:7b:7f:4e:c9:c6:56:1c:3e:d2:9b:f6:49:9d:b8:e3:
02:75:81:d7:f9:b8:81:bc:fc:b9:a3:c8:cb:00:ad:e4:2c:cd:
13:7d:01:eb:5b:de:68:6b:79:02:4c:ea:69:e6:c8:98:7d:da:
69:f1:b9:6e:00:32:3d:49:95:42:1b:02:03:05:ec:dd:bd:38:
25:e0:04:ed:14:65:65:21:4f:21:1b:ac:ce:0b:a5:24:a2:e7:
65:5c:d0:90:b7:56:c7:0a:f5:cb:61:55:09:a9:de:38:b8:6f:
9e:ea:82:c0:c4:12:17:76:bd:79:eb:aa:6d:3f:76:80:b1:43:
1a:5e:d5:6a:1c:c0:19:b8:9a:a7:b5:f6:1c:a9:f3:d0:88:c0:
0c:11:39:44:8a:69:a7:e7:e0:12:d9:09:df:d0:48:30:0f:11:
d5:74:fa:7e:93:c5:c9:7b:aa:70:4e:0f:8c:fc:e9:2e:cd:d1:
b6:28:9c:a6:06:e7:a9:39:d1:24:fd:30:fb:cd:81:f5:04:bb:
c5:25:92:cb:5f:65:f8:6d:e6:17:4c:5d:d8:73:f4:57:17:22:
0f:b2:21:72:23:9c:3d:4d:db:de:09:c2:bb:bd:0d:2b:4e:a3:
a8:66:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:25 2025 by rpki-client