Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
File: faMe6cmJpjEaCP8jIomXhAFBXpE.mft (raw, json)
Hash identifier: 3Xrh4u7655JSBP7OTQ64adYFLKILYJh2p3FRW8+5mdo=
Subject key identifier: A9:5D:14:47:B1:82:25:A0:4C:F5:69:66:9A:74:F1:A0:38:B1:97:34
Authority key identifier: 7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
Certificate issuer: /CN=7da31ee9c989a6311a08ff232289978401415e91
Certificate serial: 0194BD4E6319BF8D7E37D7A3ACB639BC0A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
Manifest number: 09B8
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: UVlXhuX0bvgC_P179eV7Q7dV3kQ.roa (hash: cem7+lm0BpjpPBzCYfd6RxOq5JUr1ids+UD9/WCyjSE=)
2: faMe6cmJpjEaCP8jIomXhAFBXpE.crl (hash: FiCQQo1uebb98pcALfRdb2QMhP0t9xVINrUv5L85KmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:63:19:bf:8d:7e:37:d7:a3:ac:b6:39:bc:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da31ee9c989a6311a08ff232289978401415e91
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=a95d1447b18225a04cf569669a74f1a038b19734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:68:50:0b:6f:b5:96:f6:9c:f8:39:cd:07:
2b:16:51:8c:c6:57:d7:36:21:3e:5d:db:e9:e9:47:
fe:7f:f7:25:85:94:91:93:18:e2:28:f0:ec:e1:02:
03:d8:d1:7f:87:1a:10:ba:68:d2:e7:fe:47:b8:c5:
b9:fc:d0:08:28:54:3d:7c:be:56:52:84:77:cc:63:
92:fe:4a:b2:03:36:d9:10:25:e9:0e:e3:44:82:b1:
e5:97:20:1f:76:a9:57:4e:a7:d1:22:75:ce:f6:2b:
6a:38:53:c7:ee:88:43:c4:81:59:55:95:7f:1e:8d:
3d:4c:af:57:0d:5f:9f:f6:d2:50:27:71:a3:a1:f8:
a1:78:ba:f3:41:0a:4f:1a:cd:a2:05:4e:e1:a6:12:
6d:e6:58:8b:2d:66:29:1c:30:37:fc:0a:1f:a5:13:
0e:5d:37:34:69:60:e4:d4:36:9e:15:4d:32:ba:67:
b8:e2:1a:17:27:87:5c:2a:62:97:9a:51:da:6e:55:
44:69:d2:9e:1f:1c:0e:cf:da:45:5c:d4:d0:3d:01:
46:ab:81:1f:1e:fa:6b:75:2f:bf:93:bc:07:d1:a2:
64:2a:02:6a:21:41:3d:2c:fa:8c:98:57:fd:5e:0f:
51:f7:85:4f:7c:13:e6:fd:e3:5f:4c:2b:7f:a1:d0:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:14:47:B1:82:25:A0:4C:F5:69:66:9A:74:F1:A0:38:B1:97:34
X509v3 Authority Key Identifier:
keyid:7D:A3:1E:E9:C9:89:A6:31:1A:08:FF:23:22:89:97:84:01:41:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faMe6cmJpjEaCP8jIomXhAFBXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2fb477-a8b7-450e-b533-11e6c0a3a808/1/faMe6cmJpjEaCP8jIomXhAFBXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dc:38:ad:61:9d:6d:7d:9d:b4:97:2a:0b:86:68:6d:97:62:
b3:6d:4a:4b:e1:67:c1:7d:ac:8a:9d:5d:76:6f:7e:c1:16:96:
db:5c:06:f9:e2:27:3c:27:12:61:32:86:cb:a4:ae:09:24:a2:
83:62:9d:56:92:be:db:87:c0:fb:75:14:e9:f3:cc:ae:5e:b7:
06:fa:ad:74:be:48:74:f0:4e:c2:43:6c:5b:ea:86:e6:b9:78:
2a:5a:30:11:8d:06:72:6e:ce:70:75:52:38:f0:fb:23:d7:72:
8e:10:d4:2d:17:21:8f:05:fe:e7:8f:f8:2b:fc:e6:e7:57:80:
1b:02:98:74:30:10:3f:cf:55:cd:21:77:db:72:db:a6:7f:0c:
49:94:b0:6c:fd:81:58:a8:be:fc:2c:10:70:5d:5a:79:55:82:
41:1f:71:bc:fd:14:24:ea:22:28:3c:dd:5a:d3:6d:53:60:5b:
f2:a3:ef:9a:17:31:8e:14:98:c2:3d:72:ef:8f:5b:46:87:d9:
72:24:35:ca:85:14:9c:ef:f3:3b:22:f0:87:54:ba:d8:a3:9d:
61:94:db:73:f2:39:ea:8b:09:de:d7:68:ec:23:55:37:14:10:
8a:e7:12:ee:d1:65:ef:67:e4:03:70:7d:6f:5a:db:7b:88:45:
e1:2c:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:04 2025 by rpki-client