Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: ip88FYz0q4JouhV1tsfxBe86PWoFyg7WrFImrK7BXiw=
Subject key identifier: 53:6D:14:D8:CE:E5:D9:83:9D:DA:62:28:CC:6D:11:43:65:66:83:05
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 0194BC3BF17D763AC771EB2BC6688D7D9477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: Ba2IOfC/2lGf7papUHe3j1fYJZai+H78KwtNeBpfdV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:7d:76:3a:c7:71:eb:2b:c6:68:8d:7d:94:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=536d14d8cee5d9839dda6228cc6d114365668305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:bf:6f:ad:71:c8:1d:df:46:1c:3e:6b:3a:
12:df:d9:b0:cb:70:60:ce:31:ac:fa:5b:4f:bb:93:
01:42:7d:25:e5:02:af:72:b1:da:4b:9b:5b:ad:ab:
e8:ef:32:c5:76:ad:e4:ef:07:0c:a1:44:88:8c:04:
46:9b:a7:5d:c9:a4:c1:2f:40:8f:0b:75:7b:01:36:
f2:c5:09:d3:9a:6e:87:51:a1:de:96:5f:71:79:68:
59:6f:bd:88:71:9d:be:cb:1c:99:56:2e:64:99:6c:
e2:84:2e:2e:cb:23:d0:a7:53:92:29:48:5f:4b:6e:
4f:7a:15:04:08:b1:03:42:de:bc:d4:62:77:58:d9:
6e:ee:c0:c9:e6:c3:1b:a5:a9:01:19:c4:91:c8:31:
ad:71:ed:19:bd:7b:cc:95:c8:a5:f9:39:09:6a:c0:
65:14:38:fa:99:ca:0d:6a:59:5d:8c:e3:1e:4c:b2:
55:ce:4d:ca:f6:53:c5:77:9f:9d:59:49:60:6e:35:
f5:fa:be:c3:9d:c5:6e:3d:95:37:bf:c6:f2:3b:2b:
b0:a0:e3:a4:83:f5:7f:f2:77:fa:4d:fd:d4:2c:4d:
9e:9c:7e:e1:79:03:00:8f:c0:65:12:93:a9:b1:49:
1b:5f:fd:97:ba:ba:0a:6a:e5:d9:ad:f9:07:48:dd:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:14:D8:CE:E5:D9:83:9D:DA:62:28:CC:6D:11:43:65:66:83:05
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fa:8f:9b:2c:9d:35:5d:d4:5f:d3:28:86:41:1b:59:b6:5f:
1f:61:58:ea:05:ad:cd:16:e2:6f:d7:e3:27:aa:fe:1c:14:ac:
36:f8:80:2f:b4:4b:a8:4c:e8:bb:07:1f:e3:45:c2:fb:9f:52:
ca:8a:aa:82:03:ad:bb:a7:83:41:96:87:c0:8c:15:46:be:18:
b3:ab:32:48:be:ab:36:dc:e9:b8:0b:a8:52:8e:e5:ce:14:fd:
5d:c0:72:83:07:41:b5:6d:84:10:09:96:a7:18:63:82:f3:a4:
c0:40:5d:0a:86:00:9e:ba:aa:dd:f5:56:f5:4e:c1:91:48:3f:
0f:df:35:ea:74:b3:91:1d:72:e6:f8:59:db:94:ea:49:a3:d5:
86:e0:d7:bc:1e:83:5c:bd:d8:5c:61:9b:39:45:70:34:ee:1f:
24:16:4d:ff:a3:85:fc:76:9f:01:e9:5f:1b:98:46:91:9c:57:
10:6c:60:41:8f:0c:e2:41:22:6e:a5:e3:d2:20:c1:d1:c2:cb:
5b:b5:28:01:c4:96:d3:77:db:b1:8b:da:28:93:d9:17:17:98:
f5:e3:7d:ec:51:80:c9:72:60:11:01:41:cf:0c:aa:d0:2f:9e:
9a:3a:21:b5:d3:5d:b7:aa:34:e5:aa:38:e3:75:b6:ee:c4:bc:
2a:34:ad:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:33 2025 by rpki-client