Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: 8fnUke7XIE99vnuWmmNIfVK1OJtLndHVZ2YYqAqO95o=
Subject key identifier: E8:CA:7F:AD:04:68:D8:A2:48:BB:E2:A9:E2:AA:2A:2E:EB:A3:B4:AD
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 0194BBCECC67C88B6E2FBF4C76BB94BCA9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0E08
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: AUKSUx28Sj/ZzBC/wjMUQhf4GaPn5hjBmjJDKFu8TDE=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cc:67:c8:8b:6e:2f:bf:4c:76:bb:94:bc:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=e8ca7fad0468d8a248bbe2a9e2aa2a2eeba3b4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:ca:50:eb:a2:eb:74:5e:1f:3b:5a:39:f6:
ae:c7:3e:c3:b7:12:89:0b:73:55:44:5e:7e:23:08:
cf:1d:59:f2:ea:0c:1c:64:03:a1:3c:2e:6b:07:b4:
c8:60:47:00:96:ae:19:bc:39:56:da:12:ab:b1:bd:
2a:3d:20:d5:d4:9e:54:a2:dc:04:78:c1:8c:31:ff:
76:19:36:22:ba:2b:48:f3:00:37:fe:4a:fe:e9:b0:
22:30:b4:fc:0e:5d:35:21:83:53:e1:86:e3:06:7e:
43:0f:d2:ec:02:d1:f3:ad:f9:50:31:60:5d:4a:e6:
19:d6:21:f7:59:f9:6e:90:6e:e2:8d:f0:27:ce:f9:
55:ce:ac:d0:e5:38:03:76:e1:38:57:53:6f:46:9c:
40:15:a2:15:a6:ba:05:95:a8:73:3f:c3:44:c2:93:
2c:65:42:2a:99:b3:d2:cf:9b:52:e0:a9:b4:79:c2:
c2:23:14:b1:78:3c:d8:4d:7f:6c:3a:16:e3:58:7d:
1d:e4:3e:f1:ec:79:66:7e:6d:62:61:98:05:4b:8b:
13:b1:73:42:ef:27:ab:21:66:ea:da:dd:df:c3:16:
ac:65:2a:8f:8b:6e:54:a9:3b:38:8b:23:f8:4f:42:
58:32:b3:ea:c6:b8:c9:f3:77:f1:9f:a4:c4:b5:4d:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:7F:AD:04:68:D8:A2:48:BB:E2:A9:E2:AA:2A:2E:EB:A3:B4:AD
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fc:dc:19:b7:eb:69:07:ac:67:1c:f9:d2:07:56:1c:89:3d:
c4:20:07:76:c3:29:3d:b8:72:8e:d9:19:8f:de:fb:31:8d:fa:
ea:60:40:c6:b5:84:5a:44:af:9c:b4:f1:9c:5e:d1:e2:ab:89:
ac:37:fe:f2:ad:98:fd:b9:dc:00:45:c7:f3:ad:8c:98:6e:eb:
69:bb:fb:2f:96:48:a2:21:fd:a5:c8:f1:7d:24:73:d5:07:2d:
2c:67:18:5a:7d:11:dc:5d:35:5a:b0:2c:16:bf:c2:ac:cf:45:
2e:aa:92:44:3d:21:dc:a5:ac:07:92:58:2c:46:f9:43:38:0c:
68:ef:2f:66:e3:a7:5f:f3:31:e6:d4:ab:88:79:89:64:1d:f3:
1e:f2:21:fb:62:dd:49:c9:4c:86:99:7f:31:36:de:57:41:a3:
c9:04:86:ee:6e:d4:87:c0:9e:cf:a8:24:a8:3e:8d:9a:df:e1:
7e:14:f4:05:69:8d:5c:a7:e2:1e:f6:27:63:4e:85:b5:01:e7:
3a:68:66:7a:83:73:60:d7:82:9b:6f:e3:bc:08:91:27:d8:f7:
fc:f3:cc:bf:1f:3e:7c:c4:df:64:ba:00:e4:54:c5:b9:98:0c:
3c:ea:d4:5e:50:47:34:41:dd:8c:1c:17:a6:f8:85:27:90:28:
eb:df:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:55 2025 by rpki-client