Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: kdFGvLPaJLXnamgDnYzca6ApTeT5IcagLzfF14gATXo=
Subject key identifier: 07:11:F6:03:C1:4D:BB:7F:49:19:18:75:E4:0A:87:71:E7:B9:39:5D
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 0194BC3C25D31D44948C4B1727D72CE8725D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0933
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: hyaKHVCu5/D2i3aL0OIxN/7YXzeCfHZpclNt3IpLQH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:25:d3:1d:44:94:8c:4b:17:27:d7:2c:e8:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=0711f603c14dbb7f49191875e40a8771e7b9395d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:29:ad:70:6e:b2:b4:b1:91:18:85:48:e1:
df:17:09:08:63:0e:f5:93:25:5f:45:12:dc:09:85:
cd:5d:23:fa:ce:60:0e:af:fb:41:c8:e2:38:19:70:
ae:7d:16:f4:67:8a:5e:a1:9d:bb:cf:f1:f5:a6:b5:
18:00:ae:94:0f:6e:00:6a:ea:ea:01:36:c7:63:0c:
eb:84:bb:5e:05:a3:e4:b6:59:a0:6c:59:50:5f:95:
ea:f6:c6:2a:fd:93:46:b4:2c:24:7a:20:9b:c6:54:
9f:cc:16:0a:a1:4e:0e:93:ad:47:e3:94:4f:57:bf:
d8:d7:97:b9:ab:a8:8c:53:f9:c1:89:5a:10:16:2c:
f2:e2:62:87:4c:15:61:47:34:08:26:2e:33:a4:a0:
71:24:b0:74:fd:e3:1a:29:a7:34:26:e8:97:60:6d:
f4:85:ea:57:85:fd:bb:c7:bd:d2:54:1c:94:b4:67:
9f:f0:dc:6d:46:40:5d:b8:c3:f1:04:49:2b:3f:65:
7d:a1:f7:df:7b:88:3a:01:1b:db:19:ae:8e:9e:11:
84:ac:c9:a1:96:61:e9:ea:6c:dc:9b:5c:99:52:23:
d5:70:dc:12:df:66:54:8f:70:c6:dd:4b:c5:84:42:
74:41:b9:a8:e7:2c:32:a9:03:eb:0a:4c:9e:d5:8f:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:F6:03:C1:4D:BB:7F:49:19:18:75:E4:0A:87:71:E7:B9:39:5D
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:91:64:b7:13:20:bb:1c:86:ce:a7:7d:0a:95:ff:3d:19:ef:
2e:2e:43:91:5a:ba:d0:fb:b4:3a:37:4e:f6:d6:fd:65:07:59:
24:93:1b:8f:e1:77:3d:55:4d:ce:d7:71:08:46:50:dc:5e:01:
0f:7e:34:42:c7:84:b1:fc:eb:5b:cc:b4:2d:d6:29:aa:c2:63:
69:59:7f:37:e0:ac:d0:6b:73:35:24:ca:de:d0:bf:ac:96:a2:
37:00:df:18:10:fa:eb:e1:6a:1c:66:40:55:9b:ba:90:70:e0:
1a:13:74:00:8e:6b:ee:89:50:4a:39:91:96:48:a8:68:e6:54:
22:4d:b3:ba:f5:d8:20:97:5e:33:25:63:d4:dc:de:c4:14:63:
ef:75:f5:87:9b:20:2d:aa:d2:01:52:0b:0d:fc:41:29:ce:e9:
1b:10:6f:1e:80:f2:7d:2f:ac:e9:e6:85:ea:f7:30:c7:ae:3b:
5a:8f:6e:a7:26:03:97:58:b5:bc:11:0b:c2:74:49:ad:f4:a8:
0f:82:98:4b:bc:74:92:0e:f6:d2:54:52:1e:a9:0b:74:98:5d:
13:5a:4f:18:c2:d9:75:59:41:14:60:96:49:ae:a9:3a:cf:2f:
09:aa:ed:ba:98:35:61:e8:90:c7:85:7e:15:8a:a2:d8:e1:a5:
43:0d:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:32:47 2025 by rpki-client