Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: nBVcR6MlVR03Y9Kts4xqyMWvqyngRynbDvmWTYDGP48=
Subject key identifier: 5F:E1:7F:27:E2:08:AD:7F:3D:FB:D0:16:54:1D:33:86:58:EC:74:D6
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 0194BD4EB03425097C87733273447BA9A561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0A16
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: MfqWhRam1Jk+b05WKP9jshU1HJm8+zy70S0R0WFoJP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:34:25:09:7c:87:73:32:73:44:7b:a9:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=5fe17f27e208ad7f3dfbd016541d338658ec74d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:99:0a:3e:b7:05:da:7e:ff:52:8b:5d:d1:
b5:d7:4b:49:1f:3f:81:bf:fa:0f:d0:7d:7d:c4:37:
89:e5:86:a5:af:b7:fb:3a:a8:b5:31:3a:ac:98:4c:
8f:d6:90:7d:86:94:1b:6d:a1:05:9d:b2:83:7a:ce:
5b:6c:20:3a:8d:06:27:da:16:83:a8:62:93:08:73:
64:33:4a:ce:7c:3a:35:9b:fb:0f:d3:fb:c4:dd:65:
ef:d0:d6:b9:2b:26:06:95:98:14:a9:ac:fe:61:69:
03:1c:c5:12:aa:a9:a6:5c:71:68:24:5d:59:8f:2a:
88:92:fe:9d:2e:00:3c:f7:6e:56:82:b7:91:44:a4:
5a:f0:8d:a0:96:54:9c:ae:4d:0f:b4:bb:17:7d:33:
de:1c:5d:b0:03:81:d2:56:eb:59:bd:b8:6b:2a:4a:
5a:c0:c8:17:30:e9:eb:ad:8a:e2:a7:c3:fc:63:1d:
d5:f3:8a:4b:3f:79:f9:39:c4:3f:dc:b2:58:de:56:
ff:c9:1a:14:a7:66:12:32:6f:f9:1d:b6:a6:ee:44:
e0:63:93:61:a3:9a:00:db:a9:4b:33:7f:53:93:1b:
fa:44:5b:7a:f3:d1:49:a9:65:e9:ed:ea:45:85:45:
ec:a4:d6:46:f5:b0:7a:4b:32:07:c9:b5:4d:94:41:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:7F:27:E2:08:AD:7F:3D:FB:D0:16:54:1D:33:86:58:EC:74:D6
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:37:67:1f:d2:e2:4a:50:f6:fd:85:86:a0:aa:f3:e6:d6:82:
b6:92:20:9e:9c:5e:cf:e1:b4:bc:08:70:f1:72:8b:9d:04:05:
7a:60:02:dc:d0:a2:ac:ad:58:2c:1c:4e:63:4d:a2:90:2a:ac:
ed:4e:f4:88:35:ab:e0:8b:5e:d7:26:c6:05:ff:aa:26:f7:02:
6e:b1:21:91:a4:0e:2e:20:ab:17:98:50:34:37:3b:8f:ca:3f:
73:9c:44:e4:f4:0a:49:51:35:ff:89:ea:38:00:84:ca:68:b4:
67:56:91:fd:24:f1:d6:58:5c:59:19:10:93:43:94:f7:0a:a9:
0e:d1:1c:4d:6b:87:01:6b:56:d2:94:fb:8a:58:cd:0f:64:95:
99:4b:57:64:81:74:30:0b:db:58:15:18:0e:ac:53:9f:dc:94:
3e:91:40:25:a3:04:9a:22:35:67:70:9d:52:e6:bc:23:5b:52:
ab:96:00:5e:00:42:01:04:45:5c:98:30:3d:ad:5f:e8:a8:77:
f3:41:4a:25:3b:fd:91:7a:3c:04:f1:50:6f:01:7c:e5:f0:61:
aa:25:d5:2d:dc:cf:9d:16:c5:c2:c3:d6:76:4a:95:49:99:79:
78:76:c5:ea:7d:23:b9:1b:70:71:84:10:c2:fa:68:21:3b:3b:
00:91:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:49 2025 by rpki-client