Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: 8b3b7EAmruFYBSjMrjmRW8C394i2gxblebPUeuDuhAw=
Subject key identifier: 1F:9A:A4:CA:44:AE:2E:09:FA:EB:CA:70:70:35:57:64:B2:89:6E:A0
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 0194BC731C07415777393DC97D38B30F3017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 1EKO08t3Z9nlIgriObmmD60gwS4.roa (hash: GhRL3PpvS/3V9MnssSh8wyX1VbIpwoy88Gmt2c9/PH0=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: mUqgW0JsP01tn8+5XYs1PsyKCvW5Gv80oi8s8cRjOno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1c:07:41:57:77:39:3d:c9:7d:38:b3:0f:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=1f9aa4ca44ae2e09faebca7070355764b2896ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:d2:13:21:01:80:d8:18:78:21:5c:14:05:
2d:10:94:55:93:33:f5:07:2e:f5:d6:f6:79:dd:10:
7f:c5:9d:fb:b4:74:13:bd:62:99:f8:5c:43:54:b8:
55:b0:17:2f:d4:92:5e:09:30:a5:0d:f6:e4:4e:f3:
86:f4:05:d8:b5:ab:cb:9e:2c:24:69:e1:75:b9:2c:
32:f4:95:f8:42:a5:1d:77:1d:1c:4e:34:0d:e8:43:
aa:58:d3:9d:95:92:3f:17:0b:0d:3e:bf:bf:12:cf:
07:73:b3:eb:1d:b0:97:9b:ab:7d:5b:2c:ff:93:a3:
b0:b2:12:7a:18:27:bd:3a:99:7c:d4:02:33:71:2a:
6f:01:46:34:b4:17:89:1b:f0:54:7f:4b:96:e7:59:
90:b5:c1:88:5f:f9:40:b5:fa:c2:c4:f9:93:c0:3d:
a5:61:5b:1b:58:00:53:9d:83:f3:ca:a0:bf:c7:f0:
9a:2f:16:f8:09:3e:2c:91:e0:0f:2c:87:31:7a:2d:
c7:c6:e3:81:fd:9f:0c:94:00:46:dc:d8:5e:77:73:
10:9e:2e:98:8e:7a:f9:a1:aa:70:db:55:d8:f3:46:
69:8b:bc:34:8c:08:5e:15:40:25:7b:9d:b7:3a:c9:
b5:68:37:09:08:f6:1c:c2:da:d2:1d:e5:ba:26:25:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:A4:CA:44:AE:2E:09:FA:EB:CA:70:70:35:57:64:B2:89:6E:A0
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:4f:f8:2c:f6:5f:83:f5:88:54:7e:7d:7d:ac:17:83:41:
c1:78:18:90:a6:2e:4f:1e:6f:a0:7d:3f:51:d0:8a:5d:e0:67:
44:79:dc:c5:8b:be:8c:2a:ed:ee:fb:a8:b9:e2:1c:36:ae:d9:
f7:07:0b:40:7d:29:2c:1c:d7:e8:af:28:61:5d:d7:d7:dc:b1:
22:2b:67:fa:8a:3f:34:b4:f4:ac:f3:64:62:c6:62:cd:04:ed:
e7:65:43:1c:04:51:ab:af:55:bc:fa:12:18:ed:aa:83:a7:96:
a0:7f:99:c5:94:f5:a0:b2:26:ca:f1:11:7a:9f:f4:e1:b8:7e:
9b:b4:2f:7f:58:c6:3f:0d:d6:ae:d0:50:e2:2b:d6:9a:a3:cd:
ae:f6:85:1f:84:13:5c:6b:da:57:c0:29:1a:74:56:a8:b3:89:
b6:1f:bc:4a:b9:03:26:c1:00:bb:08:12:4e:de:24:85:1e:06:
2f:c5:3a:11:5d:49:a4:b9:75:71:b2:43:c1:51:75:36:d0:f5:
f3:4e:09:d0:e1:5a:bd:b1:f5:e6:72:3e:18:01:ca:e8:9b:a2:
e2:66:87:cd:85:f8:68:4f:10:49:ef:01:9f:a8:b0:59:8a:85:
a1:8e:8c:6f:84:fc:4e:8e:7e:4b:2d:98:6e:2a:20:04:61:1f:
72:48:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:58 2025 by rpki-client