Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: ioQ0mUBhTRxY1/bbSjoT/0aQdkn/X2w2DyPhhxvTfbs=
Subject key identifier: 36:43:C4:81:24:F2:50:00:EA:C8:20:FB:3F:05:B2:A4:2B:7B:8F:62
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0194BD4E90FA734F38DCD411A96E1319345B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 110B
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: AlzkVXzD9df+8s0gUfknQ4+SKaO5AW1sgiCE214qAng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:fa:73:4f:38:dc:d4:11:a9:6e:13:19:34:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=3643c48124f25000eac820fb3f05b2a42b7b8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:14:49:d8:90:fb:09:47:5d:09:9b:c1:c5:
ea:4a:cd:46:11:0d:55:cb:f5:8a:a8:6b:95:d2:56:
e4:aa:0e:cd:94:a0:c8:5b:d7:47:f3:97:f0:42:2f:
95:b0:be:26:1e:80:b4:5f:59:bd:15:54:5c:33:cd:
e4:77:e8:64:b1:15:0c:0f:56:18:39:0c:d6:06:82:
48:ca:d5:a4:1b:a6:cc:fb:e0:4b:24:5d:25:9a:57:
63:1b:ca:60:fc:c3:19:25:fd:b0:6a:36:88:2a:6f:
8f:ad:35:cc:4c:19:21:e4:19:c9:1c:f5:c6:54:1e:
e7:41:f3:cb:fe:e4:58:1b:24:89:b5:56:6d:b9:be:
05:ca:c0:52:19:f6:60:9b:9c:a0:bb:ab:b0:65:63:
be:12:35:5a:91:3e:7a:64:53:6c:13:cb:37:7e:07:
2d:57:59:6c:00:e8:72:59:bc:00:ba:77:c5:b4:21:
83:44:af:78:a3:2f:c3:00:15:8d:21:51:73:9f:fa:
96:1e:e8:05:b7:28:51:f9:26:1d:7d:1d:37:97:6f:
3f:e4:82:0d:1d:be:72:09:91:72:5c:85:b0:9c:1f:
79:b3:75:f8:da:40:60:91:8d:21:c6:1f:e7:e0:d1:
8c:82:b8:5b:f5:d7:12:d8:a8:79:ce:05:78:75:34:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:C4:81:24:F2:50:00:EA:C8:20:FB:3F:05:B2:A4:2B:7B:8F:62
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f7:df:07:70:60:1a:13:78:0f:76:13:f7:b7:ae:18:63:ad:
e9:e2:3b:dd:a8:20:b8:7f:88:78:57:c2:ce:43:45:50:91:69:
61:7d:9c:ff:55:61:1d:ed:da:c5:23:be:19:32:6a:1d:5a:bb:
28:5a:cc:7a:22:9d:0d:c8:2c:bf:c9:98:73:8a:8a:9a:59:91:
94:e3:54:c3:01:0f:e0:76:87:70:2c:da:08:e6:b4:eb:19:1b:
ab:bf:6d:8e:ad:99:ef:1b:2b:2b:ff:d1:52:e1:02:3d:10:8e:
4c:63:b6:cb:74:79:f8:4e:d3:09:ea:b9:fa:4b:b0:25:62:98:
d6:eb:85:55:c1:84:cf:de:c2:84:31:cb:b1:91:db:e6:d1:78:
c6:bd:8d:68:14:8f:f6:8d:df:43:6b:74:5b:3b:81:f3:23:64:
d2:45:35:a9:97:4a:f9:30:88:a0:13:f5:a4:1d:98:ec:dc:00:
e0:99:4e:43:28:96:74:1a:8d:65:39:96:2c:5d:8c:66:7a:29:
ed:7f:ed:5e:4d:8c:99:ba:fb:ab:f2:dc:a8:2d:93:8b:16:8c:
74:fa:7c:31:9a:56:59:f7:9c:99:64:cf:45:07:c6:e0:4b:3a:
aa:d5:cc:f3:1e:fe:3f:cc:87:3a:6b:5f:15:e6:57:f2:e8:b8:
31:83:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:08 2025 by rpki-client