Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: q9WE9O0D48lODr5rlWuhXwQ0imw4JHU+h4/MmIsa1KE=
Subject key identifier: D7:1E:9D:4C:12:5F:89:E5:51:B1:F5:B9:2B:C8:37:74:3B:33:C8:78
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 0194BCAA19A71EC54053695EF99903479961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 1141
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: aCebTF+72QL1o1eu8dBwWLSo1BpS5ECU51gqeSJAcsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:a7:1e:c5:40:53:69:5e:f9:99:03:47:99:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=d71e9d4c125f89e551b1f5b92bc837743b33c878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:66:9c:65:f2:0e:9f:1d:42:51:41:e5:5d:
c5:b1:c1:61:0a:42:ae:19:34:68:ac:96:6a:7e:cd:
17:f8:6d:3e:55:60:6b:12:f5:e5:fc:1c:63:ae:db:
2c:23:cb:2f:18:c4:bf:4f:4a:46:6f:74:f5:05:b5:
b9:f1:d5:18:8e:24:53:f0:dd:72:bd:09:0d:88:b3:
83:f1:6f:8b:27:76:72:d2:e4:67:c2:a0:82:e2:37:
5b:ea:eb:8c:ef:aa:62:d0:b5:95:82:2b:dc:b6:59:
e4:21:27:ff:75:90:b7:60:9e:d3:db:07:88:3a:9e:
d1:1f:9d:e7:91:6c:bf:80:36:cd:f0:c0:5f:72:d3:
1c:c2:17:37:57:79:42:d2:81:70:3d:f5:c2:9f:ac:
dc:a5:34:87:10:9d:76:f6:19:78:74:18:20:08:56:
33:81:a9:53:d2:dd:50:a1:9d:82:35:c0:b1:2c:7c:
c1:95:82:dc:98:cd:9f:79:f6:44:93:55:4f:f4:ab:
cf:18:4f:f1:7b:75:02:87:a7:8d:6e:cc:8b:4b:c6:
ae:0d:96:73:9b:e4:5a:d5:53:aa:f8:41:0d:d5:04:
82:9d:94:df:06:1d:fc:38:7c:87:27:64:bc:5d:9f:
fa:76:c9:32:ed:72:5f:79:e9:78:ae:38:cc:bd:d0:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:9D:4C:12:5F:89:E5:51:B1:F5:B9:2B:C8:37:74:3B:33:C8:78
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c7:5f:d8:46:b2:8a:79:88:6c:73:84:a9:6e:3f:06:fc:8a:
0f:77:35:1c:d2:c7:7f:5e:77:cd:a3:d2:81:2f:fd:d1:2d:16:
01:05:09:7f:20:f0:92:71:9a:1a:2b:33:7a:a2:b9:5c:6a:63:
fd:04:f0:c8:c1:07:b1:bb:0c:73:3e:2f:6c:f2:ca:29:95:cd:
8e:0c:48:33:53:55:22:28:50:c4:92:71:f5:4b:a2:bc:66:bb:
e5:47:d0:5e:7a:89:f6:d6:8f:58:5b:26:b8:df:8c:a4:34:3b:
fe:38:d8:2f:c0:6b:e3:02:3c:a1:b5:f2:31:0a:f1:e9:63:94:
49:da:8f:bf:8e:7a:1f:de:80:17:f9:ba:07:2e:29:d4:9e:b2:
56:29:67:d0:59:fc:ab:d4:ef:42:4a:be:f3:96:ed:8b:14:86:
39:8b:ab:7d:c4:a3:e8:8e:8d:74:28:66:bc:94:f1:b2:a0:62:
e2:f7:1a:e4:ea:1b:c9:b6:29:12:5e:c9:f5:f3:07:28:0f:66:
63:f0:79:e5:dd:e3:84:69:b5:eb:2b:b8:d4:4d:45:b3:e3:5d:
10:89:97:51:48:cf:26:78:52:9b:be:72:01:26:50:db:79:10:
fd:39:a4:aa:61:f4:40:c7:98:e4:cd:4a:c9:82:fe:d7:06:0c:
27:fc:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client