Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: Ck/Au/QXatuJAQY8zSraa0RZDgU4iQLmmie1Ukz2Ck8=
Subject key identifier: CB:7D:A3:D5:41:90:EB:E4:A6:C8:04:F4:39:42:2E:15:FF:A5:C5:FF
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 0194BC3BF0C586D72BA5F8E5EECC2E21D0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0651
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: wihNyas/h8mZ8CweDAkuZJaKng2IBSe4rObiLpDN3F4=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f0:c5:86:d7:2b:a5:f8:e5:ee:cc:2e:21:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=cb7da3d54190ebe4a6c804f439422e15ffa5c5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:0c:34:b4:6d:35:82:43:aa:5b:7d:0b:c1:
5d:68:74:56:b6:ca:09:57:53:c5:9d:04:e9:65:11:
49:ae:b1:9e:ac:a4:a5:18:f8:d0:f8:60:c1:95:4f:
10:f5:a1:07:87:5a:d0:47:88:c8:17:ab:61:fa:9e:
39:29:21:37:42:72:d9:5c:79:06:0c:0c:09:25:71:
fc:5a:8d:b5:38:da:9d:34:93:76:05:2d:0d:ba:88:
7f:88:e4:cf:15:98:fe:94:5e:bb:52:1d:76:13:a6:
77:fd:cf:62:d6:63:cc:7c:94:00:5b:3e:e2:74:6e:
12:f3:37:85:55:8e:78:4a:8d:fc:5d:61:ee:24:91:
5f:70:50:8f:51:59:0d:48:14:71:50:99:4e:bd:6c:
45:d1:9c:a5:0c:40:4f:8c:27:66:e2:a3:9a:29:39:
89:63:1e:c0:7c:fb:cd:de:76:c6:6b:9e:3f:6f:f5:
97:d2:b7:95:3f:f7:f6:99:6a:32:13:db:22:30:07:
f8:ab:26:ea:46:7f:64:68:ac:ce:c3:c7:ea:29:44:
00:26:18:22:c1:00:17:b1:3c:16:21:2b:32:32:12:
0b:88:19:cb:6b:4c:ce:f7:b7:b7:eb:36:e7:1b:e9:
ea:04:a4:f8:ad:c3:38:c8:9a:c1:37:e2:f1:e0:f7:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:A3:D5:41:90:EB:E4:A6:C8:04:F4:39:42:2E:15:FF:A5:C5:FF
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:5c:c2:f1:fa:42:8b:b1:05:33:e9:cb:c8:19:46:b4:84:
62:be:22:a7:be:59:78:19:66:1b:81:b7:0b:29:fd:bb:6e:5d:
24:a5:cd:5b:06:4c:51:5c:73:7c:7a:05:05:34:05:ef:68:d0:
d1:61:23:0b:7b:78:3d:a2:50:90:86:97:e1:26:a7:24:e1:36:
0f:67:58:fa:db:28:c6:f6:f9:66:9b:b0:29:7f:4b:aa:b3:2c:
b7:ff:60:77:09:da:34:a2:7b:d8:ea:07:e7:63:03:c3:ca:e6:
7e:c5:6d:c4:c3:68:95:73:05:fa:2a:bc:58:c5:ec:b7:a5:75:
35:56:eb:36:b6:e9:07:14:29:1e:6c:ea:90:3f:ba:02:9e:04:
4d:de:a6:60:d1:51:54:94:f8:d5:d4:75:40:aa:f2:0e:15:41:
d0:d6:1e:e6:25:15:95:26:95:d4:e1:ff:3c:f4:e8:d6:37:14:
f7:8d:e7:e2:e9:8c:3f:72:db:0d:3f:8e:95:0c:4c:c8:ef:8e:
af:bc:f9:4e:df:07:a7:8d:1e:70:c9:3f:fc:34:a9:71:36:6a:
1a:3b:25:5c:31:f6:70:b0:0f:5b:5d:98:1e:49:18:6f:6a:5a:
94:2c:95:ef:9a:52:26:9b:6c:c0:a0:e1:21:7d:bf:ba:e8:4b:
6e:90:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:49 2025 by rpki-client