Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: wIcRGJuc+noNt9F1Eb/cZDSeAaHPBdi+wIzyegrImX4=
Subject key identifier: 69:6B:74:01:CD:D9:FC:EF:55:E5:E9:C5:EF:E7:A4:3F:74:C8:19:14
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0194BCA9D98FB1ACA03542668A1758AAC8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 143E
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
2: MIlrmDyeh2Gw5nZXpHwXA10utvs.roa (hash: p7ozlo1FzsyA0vjUlUQa269LV8guWlviSsPK/gn1xNc=)
3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: Z1IrDy2jGrqXR23wvhQImYmDBfPZ9F1QpxAguV82Grg=)
5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d9:8f:b1:ac:a0:35:42:66:8a:17:58:aa:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=696b7401cdd9fcef55e5e9c5efe7a43f74c81914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:c6:99:7a:4d:6c:7e:d6:8f:d4:84:30:79:
bd:2c:6a:35:8c:99:1a:42:0f:1e:43:30:00:0e:38:
f4:bd:68:7d:65:a8:5c:1a:f6:72:6c:6e:61:6c:7c:
65:6f:2f:86:30:68:7c:41:c0:e8:bc:ee:63:60:f7:
31:28:66:af:b5:21:59:24:5e:31:50:04:a5:c1:d3:
25:80:0c:6c:c8:96:07:d8:47:9d:a8:2e:e1:2f:14:
4e:7d:b5:b6:a2:01:77:a9:46:e0:ff:01:d9:c5:5e:
82:a4:09:72:c4:9d:43:90:f3:0a:d0:59:54:b4:f0:
e9:e1:2d:97:79:78:ff:33:c0:6f:db:db:70:40:0d:
51:1f:75:3a:00:55:79:a4:f4:71:d2:1b:23:10:4a:
79:11:b4:36:24:05:4f:29:8e:45:87:ad:61:46:87:
ac:6e:a1:5b:06:17:68:9e:f5:48:e1:43:ad:6f:c3:
e2:19:13:7b:86:e7:ff:1c:d6:83:fa:2b:63:e3:74:
e9:a6:e5:dc:99:6e:bc:4d:b8:c1:fd:f7:6f:62:83:
1a:85:4a:6f:9d:ed:3a:74:dc:00:bb:6e:d6:a3:07:
b8:51:92:84:2e:df:e6:8f:2a:10:35:e8:98:bb:53:
81:ae:4e:b3:e4:18:4e:14:af:0e:9c:5e:d2:49:6b:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:74:01:CD:D9:FC:EF:55:E5:E9:C5:EF:E7:A4:3F:74:C8:19:14
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:e4:54:39:2f:b5:f3:34:45:41:bf:48:d2:92:cf:1e:d1:
76:54:09:ff:3e:10:59:74:83:2f:c9:3a:b6:53:46:cd:59:ae:
08:26:6d:9f:87:d2:12:01:22:62:da:e3:bd:e4:37:cd:fb:0f:
0a:3e:ce:c4:17:49:c9:93:b3:e3:7e:ff:4f:6f:7a:14:ef:0c:
a3:c9:68:6a:5f:bd:1a:08:36:86:16:44:8f:34:a7:55:74:28:
83:d6:dd:ce:ad:3f:c5:07:9f:ce:f0:4b:ec:f7:f7:be:00:07:
70:da:5d:ed:0c:a1:e9:49:da:17:6f:d7:32:cc:f5:76:ce:06:
d0:18:d6:cd:1c:13:d8:a6:5c:16:20:4e:a9:4f:9a:d1:56:0b:
e5:0d:34:50:c1:ab:f6:c0:3b:b0:1e:60:cc:82:b7:54:82:f8:
d1:78:54:a4:e4:1a:a9:04:fc:dd:27:e6:27:64:0d:d0:ad:15:
1e:b1:3c:f2:b7:cd:64:3c:04:f6:c1:95:6f:c6:aa:3e:80:ec:
91:29:7a:5a:73:74:63:63:bd:06:8f:2d:3d:5d:7b:89:5d:15:
88:78:ee:78:5e:da:1c:e4:47:66:11:25:a7:31:5b:08:3f:cf:
00:66:db:56:1d:32:02:44:38:72:43:aa:55:50:25:07:0b:05:
b0:d9:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:20 2025 by rpki-client