Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: /JjTxK1EV4n6qi0DxfgF4xJCfeeZy/YHUFZbRNHl5R8=
Subject key identifier: FC:6E:C8:E9:03:72:06:BE:D4:FC:1E:AB:DC:A4:6A:F2:A0:45:EB:3A
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 0194BCE0DABAA9AB3BB8950111F99A4660EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 0D38
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: THr3g9OkPvsy14BHilEZG56BiqU.roa (hash: 3xhlPP170oH7ChTM2ZqRCOHhpB5jGmO+80m0RUL/u1M=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: nAcCRelmxzmsOMRrGNORMUs5tmq+zlRrE1AHMgW7lR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:ba:a9:ab:3b:b8:95:01:11:f9:9a:46:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=fc6ec8e9037206bed4fc1eabdca46af2a045eb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:64:bb:d9:78:78:52:fa:8e:07:1f:f7:47:
49:52:a1:6c:44:6e:41:85:45:ee:e9:5f:4c:a7:d9:
ac:d7:d6:7a:fe:11:fb:ee:f1:de:91:37:cf:7b:0a:
e4:b0:74:2a:fb:a2:ec:41:37:af:cc:64:24:e2:84:
16:9e:94:7a:12:54:7e:bf:1a:2a:f5:f5:fb:a4:60:
92:2e:f0:96:45:56:1d:41:51:b9:74:10:fe:c2:b5:
be:5c:f3:16:3c:7c:02:99:79:83:39:a5:e0:cf:f1:
85:59:49:07:ce:6f:2a:39:55:8f:d6:21:c0:ea:1e:
1f:9c:61:44:9b:43:33:04:a3:9a:ef:1d:e3:7d:fa:
ac:c5:0c:2f:a7:9c:a6:fb:14:6f:88:cb:d1:b5:f2:
bd:f1:f9:2e:9a:12:f7:34:d1:f6:df:55:6b:60:67:
43:a6:e3:7d:e1:e6:3b:8f:87:d8:4a:39:26:da:9f:
b6:3c:d9:16:1f:cc:60:61:f3:a2:8e:01:87:cc:ac:
7d:b8:73:3e:7d:46:69:75:60:31:6f:81:2f:0b:cf:
61:28:25:aa:7c:80:cb:5f:61:f1:7a:ec:b5:89:43:
f3:2d:b6:90:5b:39:ad:08:95:c7:32:c7:10:c8:10:
de:e3:ac:c7:22:6f:d3:ea:4b:fe:be:eb:83:60:2a:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:C8:E9:03:72:06:BE:D4:FC:1E:AB:DC:A4:6A:F2:A0:45:EB:3A
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:36:a5:c7:aa:6f:d6:79:dc:f9:82:d5:34:6b:54:66:b2:
3e:18:1b:0e:19:8f:5c:bf:e6:95:81:73:a8:05:ac:b2:9e:1f:
2a:d3:d6:3c:49:10:4c:50:38:2e:88:f7:49:ea:7f:ef:59:69:
f1:0b:f5:4e:bb:eb:48:ba:1e:45:37:14:a7:c6:8e:50:e4:1c:
45:0c:16:a6:2b:57:da:39:be:74:a2:a6:98:f0:26:82:35:8d:
96:13:1c:9c:81:6a:35:5e:26:6a:57:37:1e:e1:5b:3b:19:ad:
6a:92:4f:4c:2c:10:68:73:46:6d:98:2e:69:6e:fc:b5:20:40:
e2:14:d7:d5:5f:19:69:fb:c4:9b:2e:f9:f2:04:4b:5a:6b:6f:
e2:38:db:e9:a9:3e:44:00:95:0e:19:0e:64:b6:d2:f4:b2:a7:
d7:fd:00:3f:f4:a8:84:c4:0f:b2:2d:c9:ff:eb:27:c8:ed:d9:
ff:e1:36:cb:00:7c:87:c8:cd:84:ab:a8:e2:61:4d:dc:58:ca:
dd:dc:a7:dd:19:14:02:60:22:55:c8:e1:47:b6:05:e7:82:fd:
a6:ea:a6:98:0d:da:db:8c:63:b4:ee:4b:eb:a8:16:fd:e6:2b:
e3:e2:cb:b0:a4:26:a8:72:f6:3e:fc:f7:82:ec:71:7b:76:86:
31:1a:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:55:03 2025 by rpki-client