Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: KwAZ1x4QD1LrA4mDETScSTIKeczoQjwHDl73CsV2mXg=
Subject key identifier: B8:5C:D7:22:06:12:D9:2A:5C:19:04:E6:6A:D3:FD:9C:25:F5:ED:0A
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 0194BCA9D0B1B4DABFF9B091783D3C6A95A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0518
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: K3iMHdAeJXfHlnnr-SFgcqXt6ns.roa (hash: UNryLkfKYrOJZtamnGSaO+ZvTx9tCb9rjtiqKaAua+s=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: 7Byd7a9pkGDepoRLqbycir9S25wka6Z6Y3rEJC4wRxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:b1:b4:da:bf:f9:b0:91:78:3d:3c:6a:95:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=b85cd7220612d92a5c1904e66ad3fd9c25f5ed0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:9b:1a:93:0e:05:e9:0e:4b:e5:d0:09:c9:
84:0b:36:2c:20:f8:9a:d7:6b:92:7f:cd:53:98:75:
98:27:16:de:3a:a5:a9:d2:c3:52:60:f4:13:eb:b0:
64:61:ec:8c:bf:97:e5:38:fe:58:2d:4b:25:3c:0a:
6c:d0:7d:a8:cf:ac:bc:85:87:b2:8a:bb:85:00:94:
56:b2:ca:2e:0f:03:0b:b4:4a:d3:67:82:9b:ff:0d:
fa:a4:41:7f:c9:c2:7b:4a:88:16:8c:11:f2:da:3f:
cc:7e:54:a9:5f:e5:39:5a:dd:64:11:08:4b:bb:a3:
03:2e:2e:e4:c3:98:5a:eb:89:3d:f7:4f:ca:3b:b5:
fb:7a:6b:04:8e:34:6f:b7:a1:56:db:4b:75:4e:3f:
44:4c:17:4f:6b:72:9e:4a:0b:dc:ae:44:3d:8e:2c:
20:51:e5:dc:c2:ef:c0:4c:50:0b:7e:a1:b0:79:6b:
61:3f:ec:06:b4:98:92:02:ab:12:aa:34:53:b5:4b:
18:fe:9d:3e:a2:a7:00:59:6b:b7:31:e5:e5:a2:dd:
fa:cc:f4:90:58:82:29:50:db:e3:b4:b4:a0:12:8d:
04:51:16:ce:d2:0f:be:f9:98:c5:01:41:5a:a3:20:
35:3b:d4:08:70:fc:23:f3:d6:c1:d2:4c:41:6e:70:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:D7:22:06:12:D9:2A:5C:19:04:E6:6A:D3:FD:9C:25:F5:ED:0A
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:37:f2:52:b3:28:80:00:7a:e7:01:cb:e4:52:41:92:85:
4b:82:91:03:9a:fb:be:b2:53:dd:83:05:e9:5b:b4:d7:3c:58:
48:14:62:82:1e:b9:76:f1:7e:8a:1d:86:d4:66:70:81:e3:64:
92:0d:94:cd:ee:57:7c:05:f7:8f:7a:8c:93:92:b2:45:a4:6a:
bf:0e:55:79:09:9d:d7:7b:54:76:44:4d:ed:31:57:bd:04:ff:
f0:4e:35:d9:2a:a8:9c:a1:e0:ce:4f:d6:dc:ca:e6:0f:ec:7f:
b8:c8:1a:bf:db:97:34:09:32:27:09:cb:7d:86:2c:54:79:db:
fa:62:95:f4:3e:a6:ac:6f:64:46:6e:cf:2e:b0:db:cd:d1:37:
7d:4d:ba:05:ff:ca:66:5f:64:57:07:87:db:4a:80:f9:d3:77:
fc:42:98:32:6d:2a:29:e2:c8:98:3d:f1:75:9f:66:af:90:9d:
4c:70:04:4e:4f:61:0d:c6:e2:dc:bd:2f:1d:3e:2c:bf:6e:ea:
bd:0a:c7:a4:1a:71:6a:fa:24:f6:b1:b6:61:34:fb:50:2c:9c:
25:dd:4a:ba:61:8b:ad:f7:f6:a6:6b:25:40:e6:a7:7e:c9:60:
bb:32:49:9d:32:6a:64:52:87:0c:b4:f6:12:6f:51:e7:bc:9d:
07:61:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:00 2025 by rpki-client