Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
File: FW1wMw7FHp_x93J7F4HEenqapW0.mft (raw, json)
Hash identifier: 0qh+bAwYp6JcFNc1uTLNO24mmsnIa/pFRab7alAwbq8=
Subject key identifier: 66:A8:59:3C:53:53:07:58:54:5B:84:F0:C9:BC:83:57:D7:08:61:F4
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Certificate issuer: /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial: 0194BC04BA93689E76A02C5E01B8438939FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: FW1wMw7FHp_x93J7F4HEenqapW0.crl (hash: tCgRJyLCfzT5Biy6wP5Iuk0EUujrbEPRZVM99boIgkQ=)
2: s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa (hash: M2Uo4Gpb+a0DQhYTKJ2pCUBjR72TE2YaQI7XFu5tfN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:93:68:9e:76:a0:2c:5e:01:b8:43:89:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=66a8593c53530758545b84f0c9bc8357d70861f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:9f:ac:2b:ea:2a:3c:8e:f2:e6:14:93:d1:
91:57:99:0b:14:d0:4d:ac:cc:c1:0d:c7:bc:79:30:
f6:82:6b:bf:ac:b3:50:68:56:24:57:8d:6e:e2:05:
45:e2:de:2c:ad:cb:4c:ff:e4:b8:56:0f:b5:71:1f:
32:ed:c4:8c:b6:11:e5:2e:39:51:ca:08:6a:3d:e4:
5c:72:25:02:99:c9:95:b0:f0:5d:41:2f:94:5f:7e:
a7:e9:54:f7:13:05:a0:18:b2:f5:02:77:f7:b3:75:
fe:03:5b:38:36:f8:c8:c6:cd:68:5e:7a:b9:0a:94:
66:61:91:05:40:b7:a9:b6:a7:ab:f2:6c:06:2b:d9:
d2:4d:ea:08:a6:59:11:f7:9f:9b:cf:8d:5d:65:c3:
f7:ac:f2:b9:e2:8e:9c:94:18:4f:af:77:e7:00:79:
10:d6:5d:1b:35:32:c2:c5:ae:00:02:4d:5f:0c:74:
64:7d:79:43:43:86:c1:c8:da:53:f6:6a:6c:78:2a:
0b:b6:2f:2f:75:6b:cf:90:3f:52:f2:bd:45:ce:47:
72:cf:c2:a4:b2:9b:a9:fe:72:46:38:9a:36:7e:c4:
12:3d:14:f1:8b:23:4f:0f:24:b0:99:9c:b3:ab:d6:
52:59:f6:35:95:54:7f:6b:fe:73:e9:f7:04:77:35:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:59:3C:53:53:07:58:54:5B:84:F0:C9:BC:83:57:D7:08:61:F4
X509v3 Authority Key Identifier:
keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:af:88:1a:47:b4:b9:f5:29:91:1b:ac:fa:a0:42:d2:d9:80:
b8:5d:7b:ed:05:32:b6:18:00:ea:95:7f:03:38:ce:df:48:a8:
06:da:e5:27:de:5c:e8:9e:bd:a6:e4:5d:10:50:37:51:62:5d:
f4:ee:d2:6d:03:ca:82:c7:dd:b8:ab:97:25:51:ab:9b:c0:f4:
3f:f6:34:7a:b2:4c:4e:cb:43:68:b3:38:cd:7e:79:79:6a:d1:
5c:10:9a:36:c1:b9:95:6d:76:28:19:a5:c0:86:57:56:ea:92:
06:5c:1b:18:71:64:5f:ea:1d:ed:e4:ec:06:4c:5c:04:8b:f5:
d3:ea:83:82:7a:60:44:d5:1b:df:46:ef:c1:f3:1a:23:a9:28:
d5:12:6a:5e:6a:91:89:41:14:65:b6:c1:82:12:14:40:a5:e1:
7e:c4:a2:19:80:1a:87:9d:62:63:97:31:f9:5c:b5:ef:62:1f:
b9:f1:29:96:4d:7e:b1:2e:44:50:af:65:24:3d:7b:e4:ff:d3:
0f:41:9a:e8:3a:4d:00:43:de:54:53:5f:0b:fa:8c:6d:33:99:
ed:4a:48:6d:cc:0c:0d:a6:90:7f:23:32:31:b4:bf:ea:84:b7:
0f:94:35:c2:b7:6f:d5:e8:f1:11:8b:b3:21:7f:50:ce:4f:54:
87:fc:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:00 2025 by rpki-client