Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier: eqjt+OmF8oj1VH3C2eg/WlR8K0Tesz743hrzPpyLVLI=
Subject key identifier: 5E:07:DA:C8:83:A1:9E:57:EB:DD:F1:43:A8:A5:85:4B:03:68:25:5B
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 0194BD8583E5386C7F0B67AA2075C660D076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=)
2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: HiNpGYTjNhGxFmiE6QOPGfVqDV7SEQMPkmYeUJuJy1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:83:e5:38:6c:7f:0b:67:aa:20:75:c6:60:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=5e07dac883a19e57ebddf143a8a5854b0368255b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:79:08:34:05:e8:5f:24:ea:2c:60:c4:1d:
ce:35:92:42:dd:1e:a7:d5:d1:9d:0a:bf:b7:3b:ca:
1e:93:ec:b4:cf:7b:bb:3d:d8:b4:45:2b:6a:e5:64:
88:e2:31:a7:05:57:31:41:f0:2d:89:33:5d:d8:4e:
3e:6a:9e:6a:4d:85:78:23:0b:a2:eb:b9:f4:2c:8f:
9c:1e:65:ed:ea:32:fb:58:ba:31:e1:f6:e1:01:10:
96:ad:72:bf:da:9a:84:5b:a2:31:88:eb:e4:e3:92:
79:44:74:73:aa:34:7b:02:ab:7e:95:44:b4:fb:4f:
67:53:9c:ae:d4:ed:35:b5:7b:4b:bd:a9:5e:4c:ee:
b9:fd:8e:33:cc:b6:59:0d:82:99:6c:86:e6:0d:ad:
2a:50:eb:17:36:37:ec:58:ee:6c:2e:d8:c6:e3:f5:
c7:ba:d6:8b:d1:0c:e6:b6:87:a3:b7:12:6c:1d:a9:
ca:cd:30:1f:01:b0:22:db:60:00:95:a6:24:b5:45:
7e:a1:5c:c6:a3:d4:c8:e9:dc:6a:83:8b:eb:94:8d:
78:fe:03:2b:be:c3:33:eb:eb:3c:4b:39:2b:64:22:
50:4a:2c:8e:c2:a1:fa:6b:74:1c:f5:9f:99:c4:f4:
3b:48:db:e8:31:9b:52:e3:18:83:1b:24:3b:45:fb:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:DA:C8:83:A1:9E:57:EB:DD:F1:43:A8:A5:85:4B:03:68:25:5B
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:35:1c:04:ab:75:75:a4:ba:48:cb:cb:c7:ae:45:6c:61:ac:
24:15:ee:0b:7f:99:7b:1f:58:ef:bb:db:0d:3e:cc:d3:80:ad:
22:b5:bc:89:28:25:a1:66:9d:b4:e6:5b:f0:82:7a:a7:e6:25:
bc:82:72:db:00:95:9f:d3:c4:7b:15:b4:ed:34:8c:1b:1e:b8:
7e:a0:bc:6f:a9:ec:e8:e1:ad:5d:e0:39:c4:85:df:f3:ba:cc:
bf:be:47:8f:a4:3d:ae:a9:a0:55:48:90:c8:2a:1c:89:28:1d:
76:63:2a:8f:c0:98:2f:3c:51:9f:69:f3:0a:e2:78:38:ec:18:
0e:85:3b:a2:db:0c:fd:9d:67:a1:ee:f9:32:8b:e0:30:94:83:
ea:62:f8:17:7b:8a:82:36:1a:61:4f:2f:0d:0b:43:8e:ca:d9:
45:1d:8d:3d:02:c5:34:ac:4e:ab:c0:18:b7:83:ab:90:ea:0c:
ec:0d:e8:3d:ea:af:93:53:fd:5d:50:e8:29:a0:ea:a3:38:c4:
79:d3:5e:6b:ce:2a:5e:84:65:cd:24:02:06:94:49:6c:fe:1e:
21:ce:3e:34:d7:18:dd:16:a3:fb:83:cf:53:62:4c:9a:79:0e:
3a:86:ec:2b:51:fb:a5:f0:3a:34:c7:1d:3b:af:40:1c:6c:ae:
89:ca:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:40 2025 by rpki-client