
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
File: f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json)
Hash identifier: 0IfXI6CNG+i+gJGmVyRhsYnV+YXrCWdZePTc7c0I6os=
Subject key identifier: 31:D4:98:51:DC:60:52:62:3A:2D:A1:77:32:8A:49:EB:36:93:64:BB
Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
Certificate issuer: /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Certificate serial: 0194BC3BD83BB4839D7D0A6C51D0D3BF95FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
Manifest number: 090F
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: MVX/jU2IP9selInPDqf15OWN2JpitFM+iM+FRBEQkOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:3b:b4:83:9d:7d:0a:6c:51:d0:d3:bf:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=31d49851dc6052623a2da177328a49eb369364bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:20:0b:34:7f:e8:1b:b8:f9:82:41:c9:a0:
ae:0c:9f:87:46:5a:72:d4:6b:8f:c4:93:30:c2:97:
21:76:2c:2b:5f:db:91:11:96:c1:ee:fb:17:7b:18:
b5:0c:dc:a1:d8:ba:72:96:da:da:2f:5f:4d:89:9e:
3a:61:c0:b5:01:1b:c2:4c:d1:9f:5f:6c:95:43:1f:
b1:50:11:f9:b8:ac:79:da:c0:88:93:7b:3b:9c:9c:
35:cb:1b:5b:14:d2:32:5b:86:9d:60:fa:99:90:16:
76:75:13:cd:62:2f:12:f7:c2:cf:94:0e:19:60:fe:
0b:d6:d8:d0:dc:dd:a5:b6:29:55:e1:b6:b5:96:34:
6b:3e:7e:58:8b:db:3a:48:96:02:09:50:ef:7e:85:
98:3f:db:7a:10:7b:50:0d:26:33:b9:d2:a1:6f:7f:
1e:e0:28:69:7b:9a:7b:5c:67:f6:0a:eb:8f:a2:b0:
bf:e9:cf:32:ae:6f:dd:56:a6:67:7d:8e:bd:3f:d7:
53:cc:67:bf:6f:77:02:88:01:29:65:55:9b:8b:c8:
11:12:67:a4:dc:28:c6:bd:02:77:80:84:50:5d:d4:
46:45:cc:ba:64:70:7a:e0:a3:54:63:7a:ea:58:da:
7f:1d:0b:82:78:73:26:7b:37:fb:07:93:99:05:7f:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:98:51:DC:60:52:62:3A:2D:A1:77:32:8A:49:EB:36:93:64:BB
X509v3 Authority Key Identifier:
keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:32:b4:a7:06:3f:d9:66:a3:ef:9c:a2:bc:f0:63:80:03:00:
58:59:f7:a6:25:24:ff:05:ae:23:dc:42:f7:ec:71:e4:7e:61:
c0:98:7a:04:57:44:27:48:10:57:42:48:9d:7e:d3:56:bb:1d:
6a:91:9e:53:b5:1c:3e:3d:7c:0f:c5:3f:2b:39:d0:dc:00:52:
52:a7:78:bc:96:89:f2:64:d8:5f:60:dc:cc:93:27:39:c8:46:
1b:2d:2c:a7:6c:b8:19:d8:b9:a7:96:c0:33:09:d8:39:04:34:
76:56:7e:e8:b4:c7:fe:35:45:fe:58:3f:b7:d9:88:64:e8:90:
9b:92:5a:97:c6:1b:b1:cc:71:7e:ec:e1:c6:a7:6a:bd:70:58:
0e:1c:68:33:38:9a:94:ef:db:39:e8:30:4b:07:82:22:a3:cc:
dc:5a:a5:f9:9b:c7:b2:b2:a1:87:fc:db:34:34:29:fd:fd:1b:
91:8c:45:af:5e:81:99:f2:3f:d0:7b:5b:ed:ac:9f:10:c7:10:
a0:a0:81:26:06:11:e2:26:bf:cd:f1:b6:ae:a5:60:6f:ae:7e:
a5:3d:c4:5f:59:0b:e5:9b:64:e2:a5:34:44:be:c2:3f:0b:da:
33:20:3e:4b:08:3d:3d:b8:94:ad:fb:f1:e4:bd:35:ce:f1:80:
74:c3:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:02 2025 by rpki-client