Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: r+8/+xO3fTKJZCXFEeUFd0Citjw/oDtMCWjS7xjhA0k=
Subject key identifier: 30:B0:E7:0A:BE:7B:5C:28:6F:9D:BD:71:FF:3A:6B:E2:F7:E5:8D:43
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 0194BCA9A627CE85D6FF8B2F993907C444E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 0FB9
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: LKfYwt3r0AFBWtmYsFZsIsbLCEIyZLvduKsSLyRRf5I=)
2: TmwIzb5OMEe4RHPaC68IjB6na0k.roa (hash: dW1pEtOcDuseosGnHRvKaebls+Ju6AZ6FoBVPM8QbJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:27:ce:85:d6:ff:8b:2f:99:39:07:c4:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=30b0e70abe7b5c286f9dbd71ff3a6be2f7e58d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:7f:65:dc:80:d0:09:a8:89:2a:0e:ea:c7:
fd:53:4c:48:77:ac:d2:46:31:23:0a:21:77:d6:90:
d1:41:19:57:ce:71:88:63:c5:7d:0f:84:5a:14:c1:
89:2a:e2:75:3c:70:15:ea:e2:e8:88:e4:1b:60:a1:
99:52:f4:7a:5b:23:7e:02:8b:0a:d3:40:69:14:e8:
89:2f:c0:32:76:db:05:97:b2:9f:14:2b:ca:6a:88:
56:1d:28:78:a4:12:f6:68:58:e9:fb:4c:dd:46:13:
7a:c4:b7:0e:2c:0c:f8:ee:37:e6:58:29:36:e7:8a:
4d:e5:71:a3:7a:99:1a:eb:4c:5f:af:49:44:84:e0:
25:88:ba:8f:96:38:1b:a1:f8:e9:65:24:24:c1:12:
5d:1f:2d:ca:39:dc:e6:b6:94:20:dc:a4:09:c3:bb:
a0:17:b8:08:ff:cc:de:74:25:fe:3d:31:a4:80:da:
4d:9a:f4:e4:cd:2e:75:e8:17:68:3b:8f:99:7a:d9:
c3:4f:98:08:06:39:1f:c2:f9:5f:38:74:73:7c:6b:
e9:3b:32:aa:be:59:79:92:dc:26:4b:69:60:5d:82:
cf:97:39:b5:1c:f5:e2:d7:f6:9b:54:2d:9e:2b:90:
82:65:f1:88:c0:1d:d8:e6:47:ff:6f:ab:d2:07:1d:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:E7:0A:BE:7B:5C:28:6F:9D:BD:71:FF:3A:6B:E2:F7:E5:8D:43
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:81:ee:55:49:1b:9f:84:a2:43:5d:af:09:eb:3c:c2:5a:
5c:10:7e:ab:14:55:7f:d1:e9:50:16:c2:55:c6:06:ad:0d:9c:
2b:0f:19:28:23:a1:89:48:44:ed:b8:92:ac:24:fb:36:4f:78:
6c:47:e8:cb:df:1b:2f:4f:e4:90:b4:5e:ef:68:9f:47:73:44:
59:30:43:9d:15:11:23:34:40:52:7a:de:bd:72:3f:61:f6:09:
22:98:53:a8:b0:39:89:d9:3c:eb:f1:e5:64:95:13:25:60:b8:
c8:74:62:f6:18:4a:3a:0e:72:22:b5:b2:9d:d4:2f:6a:62:b7:
b5:6f:3d:de:9c:c5:00:05:ae:ed:8d:af:7e:0c:04:84:b0:90:
43:d3:fb:f5:e3:7e:59:96:7e:79:6d:7a:5f:e4:2e:b1:4b:33:
26:88:55:e1:91:f8:39:c3:ab:ef:f7:e7:18:ab:52:65:5f:ec:
1c:c2:db:e2:bf:31:ba:87:d0:b0:0b:f8:f8:51:0f:a5:4f:8a:
e2:4d:5b:9b:a8:92:9f:c1:4d:e0:06:7f:60:27:95:82:41:10:
26:6f:76:1e:92:16:63:4c:4c:45:8b:76:e9:a5:b3:b8:6d:a9:
f9:3d:53:bb:5e:d2:38:6a:46:62:c8:b6:f3:ec:f4:81:a5:3c:
7c:4a:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client