Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: 3nx5j1WuZfumDyO3ar6zCb74s+8tvFiPAuwplLZImxA=
Subject key identifier: 6F:E0:01:3A:FD:DB:2C:4B:06:43:88:DA:79:3E:FE:DF:4A:71:F7:4A
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 0194BCE0D66B746889387DBE06D364B76B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 068C
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: ET2huy81m3aucqPbuMYcz_TF2tw.roa (hash: E/ipcayMB6DPjVGiBr8hCFyBMlmTehPjlv7rgttgSjU=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: jz0liIKjA7Gy2sZPR4GSeAPWpQzcAuXlAIqJp3P/j5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d6:6b:74:68:89:38:7d:be:06:d3:64:b7:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=6fe0013afddb2c4b064388da793efedf4a71f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:be:62:88:7a:5f:f2:08:f6:eb:35:5e:4d:
49:7e:71:2e:c3:de:7d:c0:86:d7:74:35:cf:5c:fe:
0d:c6:f0:3b:c9:19:c4:67:a9:a3:36:ac:d5:48:b0:
4e:fd:d4:11:c4:39:cc:20:3a:9f:cb:9c:5e:3b:12:
ea:b3:02:f4:2c:2f:05:97:89:c7:c7:2c:a4:49:6d:
5e:13:84:6c:3c:4c:50:9b:36:dc:8e:9d:f7:16:6b:
b8:e6:f4:4a:93:ea:2b:f5:41:8f:10:11:c5:47:2a:
3c:8f:38:30:da:46:e7:03:17:51:85:8f:a7:91:99:
c5:92:c0:ca:8d:84:4e:e6:a3:ed:d2:b7:6e:b1:27:
e3:7f:ce:a0:28:76:19:0f:e8:cb:80:a4:96:9f:0d:
32:fe:ba:be:15:65:20:4c:37:57:77:8e:ee:bd:d5:
65:92:92:73:cb:1b:91:1c:90:97:48:5a:c1:1a:37:
e0:9a:5d:5c:19:75:ac:19:f9:ca:0b:33:b4:02:e7:
1a:b5:a3:62:bc:40:e8:34:a2:96:55:97:68:4a:da:
80:9a:71:f2:0d:21:12:6e:42:12:d5:dc:63:68:8e:
57:98:d1:db:35:61:fc:c7:cf:c3:77:7b:85:e5:f6:
69:36:2f:85:d5:9e:df:e4:93:a0:aa:75:ad:d2:52:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E0:01:3A:FD:DB:2C:4B:06:43:88:DA:79:3E:FE:DF:4A:71:F7:4A
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:b2:86:80:45:7d:cf:9f:64:7e:6e:c9:68:66:9e:9f:84:
9e:e0:5a:00:88:b8:46:ba:f0:63:86:a4:d4:c0:c4:3e:67:39:
c6:20:73:75:f3:bd:35:49:1f:fa:d6:0e:ab:65:e7:5b:27:70:
2c:0f:40:7a:ae:6f:e4:ab:2c:ba:e9:a3:53:e1:d4:cf:ec:d7:
f0:a8:98:62:1c:31:1a:83:42:7c:b4:80:05:f7:17:02:1d:4b:
83:60:18:5e:15:39:7e:bd:a7:b4:08:c1:bb:9a:c2:68:05:3c:
36:29:9e:e1:03:4a:6e:ac:39:ad:ea:7e:b7:0f:f6:04:29:fb:
ab:71:7a:76:44:dc:90:16:ad:2f:86:40:4d:c6:79:fa:fd:0d:
1c:1e:a0:14:0c:94:60:e1:a5:02:39:1b:b8:61:40:97:04:bd:
12:63:75:56:3c:e2:90:aa:af:55:04:2e:47:27:31:63:dd:f7:
10:26:4f:44:96:d5:c0:82:ce:2d:d9:6d:f3:ba:00:a4:6a:64:
7a:fc:97:96:a7:0b:5b:40:d5:f4:30:86:e7:08:ea:8b:3b:fa:
d7:79:3b:52:2b:83:6d:5f:2d:cf:f6:97:b4:34:25:56:2c:42:
00:27:21:5b:db:73:bc:cb:f4:5e:6e:e0:ce:e8:22:d0:ea:25:
3d:48:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:26 2025 by rpki-client