Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: AwuStwAutrMkug1Q+zrH3jscrgWHbuWZZjlAv4W211A=
Subject key identifier: BD:34:B9:DD:D2:B6:3B:18:E9:7F:C1:57:B0:E4:F5:2B:96:14:17:FA
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 0194BC73175CD3F7D4A571D9ABFCCBC9AA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 111F
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: mFn/T0DIs/KnNSKCQl5Q6UWxwHL0O4q6g1qndQEIQKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:5c:d3:f7:d4:a5:71:d9:ab:fc:cb:c9:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=bd34b9ddd2b63b18e97fc157b0e4f52b961417fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:e7:bf:3f:bb:f7:f1:cd:43:1a:3e:69:93:
41:85:16:02:d3:b7:8b:3f:d2:65:26:a1:72:9a:b7:
cb:db:a9:d2:b6:50:d5:1b:4f:cd:89:b3:26:18:e4:
da:27:9f:8d:71:34:9c:17:e7:1a:17:ae:5f:58:96:
ea:4a:81:cf:80:c2:e0:54:b5:0d:1b:01:2e:7f:14:
e6:fc:3c:67:50:9a:b2:04:0d:5d:3c:ea:08:b5:dc:
1a:21:1d:fb:62:8e:38:25:99:54:76:f4:34:a5:55:
2e:01:89:35:9b:3c:10:14:10:83:ef:97:44:e2:03:
3a:fa:16:2e:5e:d7:51:08:ab:cd:57:00:23:d3:2b:
1f:90:58:07:0d:a8:5d:0c:3d:0c:87:4d:6b:af:d5:
8d:0f:4c:67:3f:e6:7a:58:2c:aa:e8:42:53:76:21:
ea:c1:c7:76:be:9d:c0:bb:d9:10:be:bd:82:90:22:
79:81:d6:03:71:bb:ed:2e:8a:a9:18:93:cb:f0:24:
6a:7d:f8:8f:21:07:33:9e:a6:84:2a:92:1b:5b:51:
b9:aa:85:b5:62:8b:a4:e6:cf:5f:88:95:2e:ac:0d:
3e:4b:68:5a:f0:98:6a:80:a5:e7:bd:4a:9b:9e:e6:
4a:af:0b:a6:52:9e:01:d8:a5:c4:79:57:f8:33:0d:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:B9:DD:D2:B6:3B:18:E9:7F:C1:57:B0:E4:F5:2B:96:14:17:FA
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:df:29:0c:a0:18:b1:04:5a:51:75:d3:c2:40:03:7b:f7:
1c:21:7d:1f:9b:f0:28:52:2d:d5:3b:44:18:23:93:31:a5:d7:
d2:4f:d7:73:c8:92:17:63:64:2f:d9:0a:c5:d0:b2:41:6c:cf:
67:a0:11:e6:2d:b3:8f:f1:b7:91:96:3c:d1:e1:54:8b:13:60:
6e:0c:d5:d8:fd:8f:80:6d:79:28:0c:22:dd:ef:2b:3a:24:ac:
84:4d:be:28:57:9d:c7:75:7a:d2:b7:68:79:42:22:21:c7:89:
04:3f:31:d8:1e:89:75:cb:c6:d5:38:05:a1:49:d4:6c:40:6f:
a1:6c:bf:a8:c8:11:ab:9c:a3:6c:eb:82:61:14:3a:be:85:99:
c2:b7:fe:95:f0:83:f6:18:a5:e9:b2:c7:5e:ff:48:40:8c:be:
35:71:e7:26:6a:c1:88:21:e1:91:8a:af:21:f5:56:42:2d:70:
27:d1:5a:0f:70:4c:37:c9:a1:fe:a9:47:f7:3c:d8:4c:f7:47:
a2:09:78:a1:a2:5e:d6:fa:8a:50:f7:3e:cc:8f:92:e5:b7:e6:
1d:22:da:b3:6a:4e:4a:eb:4b:d0:43:0d:1f:90:fb:64:7f:28:
3c:52:90:99:8d:26:45:73:e0:d3:0d:e5:e5:2c:0a:f5:7b:85:
6a:fe:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:54 2025 by rpki-client