Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: 34PiUjM3DWvFm4xLBxDaqM+SrIqLrmNMrs3YFyF0yF0=
Subject key identifier: F3:E4:D9:E9:02:74:F2:4C:31:FD:C1:42:8E:15:02:39:92:B4:DB:94
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0194BCE0589AF47A4792C49026D211F82983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0409
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: 2lzpTnWikk5WyPAHzu93iaXar3c.roa (hash: HljhXM+lqmgD41OyNTeAyYHbVlBeWswT04btlhRf0Vs=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: HtuWNBHSsvJASX/o6w8aa1CNMcDD3zVxPBHWMdIBFxg=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:58:9a:f4:7a:47:92:c4:90:26:d2:11:f8:29:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=f3e4d9e90274f24c31fdc1428e15023992b4db94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:07:49:1f:81:1d:26:98:6d:f6:78:5d:2c:
90:8b:0c:dd:d0:a9:75:6c:35:04:18:20:62:ca:e0:
12:15:d8:95:06:c0:d6:fa:9b:bf:69:09:1a:6f:48:
a4:c2:a4:e8:8d:26:88:4e:41:42:88:9f:6b:d1:8b:
fa:91:0b:e5:c0:db:c2:59:78:08:f2:b1:f3:3c:b8:
56:66:4d:e5:2d:ea:4e:b8:0b:6f:87:b6:9f:3e:4e:
e5:7a:a6:ab:0e:e1:10:a1:ee:15:c5:18:c3:5e:7a:
34:8b:99:ee:f2:5b:33:41:1b:1c:c3:66:87:40:35:
de:03:e7:a9:57:2b:51:ae:f6:3d:80:81:e3:7b:4e:
f8:a0:63:71:29:33:f9:75:13:30:5c:1d:db:fb:f9:
be:41:fe:57:9b:a5:4c:bc:dc:06:a4:b8:b6:ab:02:
7c:64:a6:ff:ed:1b:62:d5:ea:61:32:a1:35:1b:65:
9d:29:a4:55:0e:ff:58:ef:07:98:84:a8:95:99:4f:
04:fa:3c:c5:1a:3a:75:e4:86:34:32:29:2a:5c:0c:
b8:0a:45:70:9a:d7:4a:ea:d8:eb:58:f8:67:71:07:
54:f2:8b:80:9f:2b:39:a0:72:82:17:0e:c5:ca:a2:
a5:6f:fc:4b:cf:15:95:63:99:0b:ab:88:6f:2f:41:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:D9:E9:02:74:F2:4C:31:FD:C1:42:8E:15:02:39:92:B4:DB:94
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:c4:68:69:79:2b:27:ca:56:45:f0:75:b8:c1:b3:31:a3:
30:9e:3b:92:60:f1:1f:ba:2d:50:c9:1b:cc:f0:8d:7f:81:08:
f7:47:06:18:0a:ab:ed:39:91:9f:fb:41:85:c9:d7:20:5f:9d:
44:f7:61:82:df:03:a0:7a:ba:39:df:c8:7f:50:10:9c:62:24:
e9:a0:74:0d:9c:eb:51:86:d1:df:ae:e4:65:b2:12:d1:eb:c8:
1f:75:5d:47:91:23:13:16:d0:f5:c3:89:7c:35:9e:e4:66:1c:
0d:ee:7c:23:65:8e:68:a8:c6:21:09:ec:50:cc:81:39:72:97:
24:7f:67:fd:54:78:d7:47:42:f9:28:bc:64:a0:00:de:d1:c2:
f3:fd:e5:54:6d:8d:a8:91:6e:fa:3c:0d:98:e3:7a:9c:31:d2:
ae:1a:b1:79:6a:0f:63:14:c9:28:6e:da:5a:2b:0d:cb:20:17:
27:ec:16:32:63:99:5c:3e:d0:93:9b:ee:8b:5d:de:30:b4:9a:
6b:71:d5:74:d3:71:30:21:57:25:e0:e5:56:c7:ca:f6:fe:08:
6d:02:db:01:1b:f5:bc:62:ef:97:5b:60:9e:51:ff:bb:0e:4d:
61:63:b9:ae:a9:50:16:b5:d7:47:e4:09:3a:73:33:6e:c0:76:
6e:6a:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:50 2025 by rpki-client