Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: cXVE6T3n4A73i1+cEcktX/u76+UPGNttk2ix02usA3U=
Subject key identifier: 4E:2A:5E:56:70:A2:4E:09:67:2F:D1:AF:B6:70:DD:87:58:7A:56:4C
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 0194BD17E87DEAB3DE84311983038C9F64AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 09DE
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: S15bhh/cl9Ga2W6yes29O60M8jUxn+UaVtWuAYZBHoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:7d:ea:b3:de:84:31:19:83:03:8c:9f:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=4e2a5e5670a24e09672fd1afb670dd87587a564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:66:40:5e:45:1b:76:79:71:78:fe:bd:b9:
8c:c4:45:a0:56:9d:c6:72:84:74:88:82:83:a2:ef:
be:7b:75:66:29:c7:20:3f:1e:b1:7a:a7:19:0f:af:
8d:76:5d:dc:0f:9f:bf:0d:83:1c:f2:17:56:c9:d6:
b2:ff:2c:e8:cc:9f:6b:c6:35:ab:81:6b:5a:b1:54:
00:e4:97:2c:01:f8:9f:d7:09:f5:52:18:ad:d8:41:
c3:9e:ad:0b:7f:a0:91:2c:f2:f5:83:79:b0:ca:51:
ff:e1:f7:cd:a2:da:1a:91:27:93:23:66:d5:c5:26:
fa:29:45:ff:f8:9d:fb:51:05:ed:db:1a:ff:45:aa:
94:23:55:cc:84:4f:d2:b6:95:f3:4f:e6:bc:55:b7:
a7:04:4d:8e:89:e4:65:4c:cb:55:aa:e1:f2:0a:6c:
3b:4d:43:0f:46:38:5e:9e:ad:56:5e:5b:63:62:a3:
2c:5d:0b:ca:e9:ba:79:b4:44:13:13:c0:39:52:91:
79:16:bd:46:76:8c:df:f0:c4:f2:a3:83:59:c3:45:
4a:7b:18:99:92:0d:d2:c9:1d:04:28:6e:06:50:d3:
2f:bd:43:1e:da:24:82:d7:fd:a7:8f:a7:a5:81:29:
0b:8b:04:0c:93:d0:a8:5e:4b:5c:a8:20:f3:39:7c:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:5E:56:70:A2:4E:09:67:2F:D1:AF:B6:70:DD:87:58:7A:56:4C
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:0e:69:b5:f6:0d:40:3c:7a:5f:83:30:b5:4c:67:42:d3:
7e:75:5c:6c:c4:64:7e:a5:0e:d5:a9:46:a4:ab:86:29:20:cc:
67:f9:be:eb:56:fd:65:b9:8a:d4:b5:ca:10:c5:21:44:5e:a1:
73:ad:ce:50:8b:47:72:e5:5a:14:71:32:02:43:68:8f:4a:a5:
5b:d9:1a:57:c4:9c:70:ab:6b:dc:d4:33:4c:ef:eb:52:37:14:
db:65:0d:79:b9:1d:b5:87:41:bd:ea:bb:e6:0d:24:e1:36:cb:
b3:34:11:bc:33:0c:bf:2d:19:67:ef:a2:b1:ba:fa:bb:6d:94:
bd:52:d0:de:52:bc:80:10:88:66:10:ac:37:b7:d3:cd:56:37:
76:5f:88:08:d8:f6:be:2d:20:6b:03:01:be:3e:16:25:d3:fb:
d4:16:ff:00:60:9d:9c:a8:04:84:e4:90:b2:f6:22:a9:07:31:
13:67:39:da:b2:81:0a:e2:02:df:ed:54:8d:08:5e:59:6c:6d:
b0:b3:ab:f1:4e:2e:c8:6a:38:b6:c4:9e:05:c9:b7:73:f4:34:
2e:5d:08:a9:5f:04:8f:9e:06:f4:8c:1d:0a:50:fa:be:e6:b8:
1a:df:72:21:7c:bc:a1:b3:8a:23:21:45:0e:e6:d6:48:67:bf:
91:a0:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:17 2025 by rpki-client