Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier: VkBCdCjetmQkNhOIh93CGaNMMMuxwumlgS9m3AfjBu4=
Subject key identifier: 33:84:53:C8:2C:3E:46:D8:AD:E3:23:2D:D9:07:9F:6A:EB:D1:6A:F7
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial: 0194BC0532C7267F8EF960E54DBFBB46A3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=)
2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: 3YADG5KjTERwNwQtyyHfp4d7gb/G1AwJ39daeIaILGk=)
3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:32:c7:26:7f:8e:f9:60:e5:4d:bf:bb:46:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=338453c82c3e46d8ade3232dd9079f6aebd16af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:9f:65:3a:7a:0c:2e:d6:4d:14:7b:08:07:
31:49:44:51:43:f5:a8:27:61:8c:f6:d4:f1:1f:04:
d7:24:22:a4:a1:b8:27:08:a3:da:e2:38:02:e9:81:
80:00:0f:b9:02:58:82:5f:f4:04:62:41:55:4f:bc:
99:bf:30:a9:c9:88:f7:19:c2:e6:bc:8f:d3:3f:d2:
d4:7f:a5:51:b7:44:9d:d8:5a:c2:90:54:6f:ac:0e:
9b:4c:e7:f4:e6:bf:15:78:9a:2e:d7:8b:87:38:f8:
47:92:1b:c5:c8:b4:88:1d:71:aa:b4:53:98:0e:c1:
88:8e:f8:9c:83:73:74:2d:8c:11:07:51:d0:49:90:
69:f0:1b:e6:29:f3:aa:97:bc:c9:ac:51:fe:c4:35:
e3:4d:5a:be:54:9f:cb:f6:3d:e7:7b:56:27:f4:b8:
07:45:6b:0a:34:d5:c8:d8:57:79:96:79:41:2d:7f:
a0:a2:23:db:08:8d:7e:f3:87:46:89:1b:88:75:3a:
c0:95:b4:63:8f:26:94:ad:27:f7:09:5c:15:8d:77:
67:13:6f:b9:5a:16:6c:8d:09:c7:57:59:b0:ed:06:
f7:52:fa:6f:21:bb:31:20:41:9e:65:72:e7:c7:28:
60:7d:1f:70:e8:44:50:d8:c2:84:06:c0:82:6a:79:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:53:C8:2C:3E:46:D8:AD:E3:23:2D:D9:07:9F:6A:EB:D1:6A:F7
X509v3 Authority Key Identifier:
keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:ae:e9:67:63:67:d8:75:8e:1d:64:e3:09:32:26:26:70:
61:2c:18:00:6d:81:65:66:62:6a:a4:ad:1b:c4:3e:48:f7:6a:
13:0f:aa:8a:46:9f:a0:d9:fa:ac:72:74:a0:c1:16:5e:da:29:
18:e4:9c:79:13:4e:d5:9d:d7:45:e9:8f:1e:28:c5:91:eb:8f:
b1:71:2a:dd:ba:42:9b:73:7a:08:88:79:c8:dc:da:b9:96:58:
95:a5:b1:a9:ee:92:52:fb:0d:fd:9b:ce:76:1c:45:56:b2:a7:
04:4a:c5:90:b6:ed:cb:c0:1e:60:2c:2c:bc:52:a4:3e:02:60:
5a:35:70:bd:35:9f:83:84:b9:a6:d5:2d:c5:37:ac:65:ed:7f:
16:be:e5:d5:a7:1d:c9:99:0c:66:85:c0:1d:86:d8:e9:5c:66:
09:f4:e1:fc:aa:ac:1c:ca:15:a6:eb:a2:74:87:e3:34:d1:be:
cc:85:97:90:84:29:a0:98:6a:e4:34:e4:28:b0:a0:84:10:8b:
91:25:b6:3d:fc:b8:e8:4c:8a:f5:61:03:4c:fe:86:84:dc:f8:
7d:92:8f:92:0a:ab:08:90:e2:47:bf:c6:80:05:fb:0f:fd:b9:
e0:90:79:69:7d:27:a6:3f:cb:a8:8d:a2:aa:86:dc:cb:4a:10:
9a:f5:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:16 2025 by rpki-client