Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: 4hX/xSUWZeuWs8xMba8MWSteQSX4w4i3mKChGN3dS/o=
Subject key identifier: 81:EF:6D:1F:E5:DC:06:BB:AA:45:70:D1:E6:0A:24:19:12:EC:E1:5A
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 0194BD4E8BF10C23B1D70194817939B86EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 0581
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: DwcAoHlhNhq1Py16EBDj5vhELBoMQ6GCVYHzY9Oc7B4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:f1:0c:23:b1:d7:01:94:81:79:39:b8:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=81ef6d1fe5dc06bbaa4570d1e60a241912ece15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:93:24:09:64:fa:19:08:f3:09:16:12:e4:
8b:09:94:13:99:e5:8f:f0:02:6e:cf:22:02:41:bc:
9c:97:c4:c1:c0:09:44:b1:76:93:7d:d0:90:6b:a8:
95:35:fb:0c:d1:4e:5e:77:c5:3c:d9:1e:92:0b:36:
77:fe:b0:ab:11:dc:c4:49:49:bc:50:1a:ea:7a:7a:
de:67:85:e5:2c:db:d7:27:fc:43:54:81:66:6a:2b:
3c:9e:3e:8f:81:a6:c9:d7:ca:32:cd:5c:c1:27:fa:
0c:ea:6f:49:33:62:2a:0a:30:29:f2:20:cf:9a:02:
81:71:1e:c1:ab:56:b7:d2:7f:af:18:43:51:6e:61:
70:c7:61:fa:ed:eb:15:60:d3:19:60:0d:c6:29:2f:
8c:ea:33:72:ea:ff:54:01:0c:f7:ef:28:ae:d3:06:
9b:8b:bb:53:7f:43:34:e7:6c:d0:fa:1e:6f:cb:2d:
d6:ac:c8:af:a0:4e:a4:9a:b3:e9:a1:c3:de:a7:1c:
ac:2f:80:e9:2e:f7:56:a5:37:74:44:24:5f:87:78:
98:de:36:cd:dd:3f:9d:f4:3f:48:e7:e6:9d:46:f0:
de:19:f8:af:d0:66:f6:68:18:cb:b4:5c:e4:10:7c:
49:31:99:78:a1:01:e6:08:54:08:dc:d7:0f:ae:ed:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EF:6D:1F:E5:DC:06:BB:AA:45:70:D1:E6:0A:24:19:12:EC:E1:5A
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5b:02:df:b8:f0:46:56:ee:0c:2d:66:65:a8:69:ad:26:69:
cc:e1:5d:fc:3c:f7:00:93:20:5d:fa:90:da:be:91:17:9b:ee:
3d:24:39:0b:87:fe:81:20:dc:a4:6f:22:15:c1:26:a1:a8:56:
59:10:e1:04:1c:ae:01:68:a2:40:94:17:a0:54:58:0d:32:38:
d4:18:f6:f9:05:d5:bf:21:14:63:3d:d6:30:03:03:88:b6:72:
84:af:96:22:77:ab:48:14:73:39:82:08:01:3c:8f:2b:a0:52:
cc:ba:d5:ed:55:58:22:a4:7c:16:b0:6a:db:34:f0:02:61:d6:
77:18:17:ff:ea:7f:f6:6b:19:c2:b3:e5:2c:d5:8f:db:28:a5:
97:95:82:32:ee:52:b4:e3:b1:c4:a5:44:a7:39:2b:08:64:f0:
94:81:ff:59:a3:75:34:e3:09:f9:bd:fe:1b:4e:e5:11:66:6c:
d1:1a:08:66:e2:c2:74:cf:94:74:de:9b:b3:90:f0:bd:76:51:
51:7e:32:17:cd:74:f8:46:64:ad:42:35:34:b7:ae:41:35:39:
de:07:e1:03:c6:fa:cd:cd:6f:a2:da:f8:44:fa:be:6b:45:80:
8a:e5:83:34:71:ff:da:65:b8:ab:ba:40:14:3d:37:d1:51:51:
84:01:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:38 2025 by rpki-client