Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
File: ffgoIInih2ZRITPUI2r0FaN709I.mft (raw, json)
Hash identifier: V78w+fWltToeh1ne1v0Xn+zBNtVPbtoWetX7MefVELU=
Subject key identifier: D8:97:FE:EC:00:B3:F3:69:3B:D5:A8:F1:D0:2E:E1:17:7A:96:7B:7C
Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2
Certificate serial: 0194BD4EB90E94209523BA648965D40D40A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
Manifest number: 016B
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: ffgoIInih2ZRITPUI2r0FaN709I.crl (hash: jZ5trV/9rj05hz+lN9mBx/vgRqotwzfocICH7VKjAJ0=)
2: ig1FgJHLmhVp1HtQnDRiBOwALfo.roa (hash: IlHHwWSfIB2n4wpeo6hZD+s1jPc54zsXsSO0r9HX6WY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b9:0e:94:20:95:23:ba:64:89:65:d4:0d:40:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=d897feec00b3f3693bd5a8f1d02ee1177a967b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:ad:11:27:ec:d5:4d:bd:d8:e1:11:03:69:
fe:14:b9:13:fe:ea:3e:2b:82:67:dd:e6:f1:75:f0:
22:10:9d:20:b0:4a:c3:d2:da:54:31:8a:89:17:c4:
cf:13:09:a6:b5:52:1d:2a:26:50:f3:36:02:5e:ae:
bf:c7:2b:7f:3c:b5:1c:59:3c:a5:a2:63:55:e0:77:
f6:8c:ca:d8:d4:56:3c:a1:2d:67:53:7e:08:59:8a:
9e:ae:9b:e9:d9:e6:37:a4:9c:fe:71:38:89:10:86:
58:a0:97:85:dd:1f:55:e2:b7:59:c8:0a:3d:f4:b4:
36:15:b8:60:43:63:bb:7c:40:50:aa:83:6a:20:5b:
bf:14:00:8f:48:b7:1f:fa:5e:d4:65:13:de:ae:83:
f8:3f:b4:e4:ac:ed:91:c5:a0:6f:5d:15:45:bf:e9:
14:2d:c2:72:54:2f:e5:f1:d7:44:80:b1:05:f0:32:
37:08:ba:d5:db:e9:dd:01:7b:a2:94:c3:cb:7b:68:
27:f3:99:a2:4f:52:da:64:99:36:4d:03:0e:78:5a:
2e:56:48:dd:ee:99:20:a7:36:ab:d8:8a:3c:71:6a:
f3:5b:1e:e8:7f:07:46:2f:e4:ea:f8:cc:72:c9:a3:
3e:88:98:85:a8:ad:bb:de:69:67:4c:70:39:8f:65:
c5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:FE:EC:00:B3:F3:69:3B:D5:A8:F1:D0:2E:E1:17:7A:96:7B:7C
X509v3 Authority Key Identifier:
keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:46:99:32:52:bb:0e:81:e3:e3:b5:21:36:b3:fd:a5:79:9a:
e8:dd:5d:e7:06:74:2c:94:54:be:d2:7f:86:18:03:46:6a:d8:
ff:97:a1:30:45:81:79:74:4c:3d:56:20:91:81:47:73:b5:c2:
4c:b3:d5:f5:2f:68:64:87:ca:3f:ac:81:e5:ae:2f:30:c8:f5:
e8:f5:d1:bd:05:5f:fd:38:bf:df:69:1f:22:1c:f2:69:f3:fd:
69:d6:45:ea:58:b3:df:39:4b:9f:2b:64:a9:99:c5:84:de:5f:
7a:61:2c:4b:97:4c:dc:0d:a8:4c:c6:c2:43:25:28:0d:4d:ba:
f1:3b:2d:11:3f:46:5b:45:70:df:63:b1:a6:e6:ce:74:f4:ce:
18:8b:4f:9b:79:38:71:f9:ef:62:f6:bf:03:ae:b2:53:fb:1d:
f8:79:6b:a5:aa:8a:11:3d:d5:6f:76:ae:c6:66:32:09:05:bf:
c0:99:78:4f:a0:21:7a:2e:a2:b1:c6:17:97:92:6b:59:4a:92:
55:53:c8:9c:d7:fd:29:ef:37:1a:b1:99:5c:1e:cd:09:a5:07:
65:40:d6:3d:3d:c8:94:1e:65:40:83:0d:c4:4d:4b:de:0f:c5:
da:73:96:a2:ac:b5:e2:9d:9e:f1:c5:d6:83:f4:a2:e2:4e:e8:
8a:f1:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:03 2025 by rpki-client