Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
File: tF9VYNefBKktehUPPtjaQwir6jM.mft (raw, json)
Hash identifier: yyUClK9ggN7DwyB8rTstnMFw3e4SPQr4/hMsk8aM2Xw=
Subject key identifier: EF:66:67:80:B6:5A:7A:4C:12:D8:7B:DC:9A:C2:BC:BE:E1:8D:96:D3
Authority key identifier: B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
Certificate issuer: /CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Certificate serial: 0194BC0519720F7401BC0473936F083FA0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
Manifest number: 0FB2
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: rFHksT2fJAQ7epdh-sMDgGR2SM4.roa (hash: Z/iFpAzmqAm2KrlQVqRFy4X3KTo7SXYWoBA5a7g2HG4=)
2: tF9VYNefBKktehUPPtjaQwir6jM.crl (hash: ZYRbSgU1+ASJVSDTMvu/WFAHydwgHjeDfCHYQF1A6tI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:19:72:0f:74:01:bc:04:73:93:6f:08:3f:a0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45f5560d79f04a92d7a150f3ed8da4308abea33
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=ef666780b65a7a4c12d87bdc9ac2bcbee18d96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:05:9d:52:8c:2e:db:cb:e3:13:c9:f0:12:
2d:4b:4c:7f:0c:94:6f:85:17:59:3c:47:ac:19:06:
c6:34:db:4e:63:6c:99:2f:93:d6:37:ee:dc:80:8a:
4f:5c:63:63:88:82:42:e4:80:38:46:54:57:f4:d7:
bd:8d:80:1e:0d:98:ef:43:d1:9e:94:79:6d:af:c0:
f3:11:6c:e1:1a:6a:ba:ba:7b:d6:47:eb:9d:a2:da:
6c:9a:4c:a1:39:03:13:9f:2b:12:67:1d:05:05:79:
82:3d:2e:04:8e:35:19:80:70:3d:67:56:46:d2:9c:
21:49:63:6b:b4:55:6f:50:9c:bb:d4:18:6a:11:a1:
28:11:a5:21:65:d3:37:76:e4:d2:6a:be:61:23:7f:
4f:ac:3a:ec:69:a9:65:49:f8:80:85:10:15:55:9f:
d2:b8:9f:13:74:02:a0:24:e0:2a:f8:80:7d:15:d6:
8a:b8:ab:7f:fe:94:bf:8b:e5:41:dc:b2:2e:b1:67:
a8:e5:e6:03:ca:ed:9d:23:95:a3:e1:46:92:af:9c:
c5:c0:73:e0:b9:4b:34:5c:70:18:70:fc:01:83:f8:
b4:b7:d5:b8:0a:2a:06:86:0a:ef:91:67:5f:24:36:
0b:07:f1:6e:af:0a:e1:78:f8:d8:65:2f:dc:2c:0c:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:66:67:80:B6:5A:7A:4C:12:D8:7B:DC:9A:C2:BC:BE:E1:8D:96:D3
X509v3 Authority Key Identifier:
keyid:B4:5F:55:60:D7:9F:04:A9:2D:7A:15:0F:3E:D8:DA:43:08:AB:EA:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF9VYNefBKktehUPPtjaQwir6jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7b169d-fc09-49bb-9669-c3222474eef1/1/tF9VYNefBKktehUPPtjaQwir6jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e0:7e:77:18:9b:2c:aa:75:a2:9c:13:1c:50:14:43:ff:1e:
ec:1d:48:aa:80:de:8d:f3:8e:48:42:5a:a2:a0:bc:04:67:38:
aa:bb:0a:53:08:c6:2f:7b:75:87:31:64:7c:b8:39:63:fa:20:
1c:21:05:25:1a:6e:a3:b9:cc:ac:b9:f8:23:7c:a5:f3:86:18:
92:ea:6c:be:8e:2b:ce:59:c9:09:b5:40:28:79:c0:83:5d:c7:
ec:63:b1:ca:27:a8:87:c0:ea:2d:67:ea:48:52:dd:63:f1:94:
30:5d:a3:02:41:0b:d9:25:44:b3:be:15:8e:76:c9:51:70:5c:
50:88:0f:12:9c:1e:75:da:34:94:2a:bc:de:e1:ea:0b:99:18:
29:5b:bb:d8:49:56:55:57:7a:a6:57:62:47:60:50:21:fc:8f:
1e:7f:21:51:37:a9:ca:68:89:e3:2e:9e:fd:09:5f:a3:1e:45:
c0:ed:4f:f0:fa:14:3b:cd:ba:02:21:ed:f9:1c:01:e2:65:4e:
45:7c:a8:73:1f:54:57:ed:27:e8:ff:36:df:2e:c0:80:7e:bf:
18:3c:a1:5e:d6:c0:b3:5e:0c:48:de:89:24:4a:b9:ad:1e:74:
34:83:9d:9b:ce:63:8c:67:62:67:fe:cb:f9:d2:44:aa:20:4d:
21:86:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:21:36 2025 by rpki-client