Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft
File: f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft (raw, json)
Hash identifier: bdFqr5hNOfiwvVSWaisRNQGALhxfCFhYELc6EoJoTPU=
Subject key identifier: 0E:C7:9B:14:7F:43:D2:07:96:9A:78:C8:28:4C:10:A2:EF:53:89:94
Authority key identifier: 7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
Certificate issuer: /CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Certificate serial: 01953653F4440BF74D6CD7087C45F24CE812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft
Manifest number: 20
Signing time: Mon 24 Feb 2025 05:00:26 +0000
Manifest this update: Mon 24 Feb 2025 05:00:26 +0000
Manifest next update: Tue 25 Feb 2025 05:00:26 +0000
Files and hashes: 1: 1-m_3RFpQCAw4jTTQyaAb-oV2N1E.roa (hash: kTAY786ulMAyPVbvgZlyetAoQ+YkeamwP2yDhB5mRkY=)
2: 5bzfih1KpfUYs_mBIo4Uqo2so7A.roa (hash: sKf8MeBydtsH+2/GrOGEj40FLyj41ErfCcWqRKTbzLA=)
3: f8iyhrnRvfvnFdbuUjN6MC8XcEI.crl (hash: CEZp2z9rMZHVbohpwGvow19GvFPJfzYpdZGS19b3no0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:53:f4:44:0b:f7:4d:6c:d7:08:7c:45:f2:4c:e8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc8b286b9d1bdfbe715d6ee52337a302f177042
Validity
Not Before: Feb 24 05:00:26 2025 GMT
Not After : Feb 25 05:00:26 2025 GMT
Subject: CN=0ec79b147f43d207969a78c8284c10a2ef538994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:e8:57:78:8e:95:b9:45:a4:d3:71:63:fe:
a9:f8:14:6d:f2:60:a6:3f:72:c9:d5:f5:3a:c5:fe:
db:cc:30:85:85:79:1b:55:c8:56:3e:ff:f9:80:ff:
7a:5b:7a:5d:79:ef:bd:98:9c:bf:ea:fe:d4:3a:dc:
9d:d4:66:ae:23:1a:c2:af:2b:ae:31:14:1e:4c:52:
31:80:c0:a0:37:3a:54:f0:2e:8d:50:e4:b3:57:47:
43:dd:26:e5:9c:4a:c8:a7:50:4c:93:d0:b9:39:e2:
52:ae:b7:c3:04:ec:69:0c:49:cf:9e:f7:6d:64:20:
26:9c:fb:75:1d:9b:84:6f:19:17:6b:2b:9e:dd:b4:
2c:76:07:b6:b2:d8:32:2f:74:07:f7:c3:18:f3:1b:
e8:96:ad:fe:cb:d5:8e:51:d9:b4:94:26:87:32:a2:
70:87:f8:72:df:f2:24:7e:8c:22:c0:60:0b:7d:3f:
4d:c1:c5:5e:f7:0f:d9:63:e8:fb:00:ae:bc:86:89:
18:b6:31:73:72:71:a3:1f:24:09:b5:c2:35:d0:2d:
86:d8:30:7b:16:05:e7:17:f4:be:0a:58:67:ee:30:
65:f6:6d:a6:69:e2:00:62:8c:b3:0c:2e:12:68:ed:
9e:d4:dc:59:2b:d6:b2:96:ff:96:85:44:9f:29:b8:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:9B:14:7F:43:D2:07:96:9A:78:C8:28:4C:10:A2:EF:53:89:94
X509v3 Authority Key Identifier:
keyid:7F:C8:B2:86:B9:D1:BD:FB:E7:15:D6:EE:52:33:7A:30:2F:17:70:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8iyhrnRvfvnFdbuUjN6MC8XcEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ac9a3a-4986-4708-a8b7-fe2b5e5fc8a1/1/f8iyhrnRvfvnFdbuUjN6MC8XcEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:ca:b0:8a:93:f4:ed:2e:06:15:b1:f5:5f:3a:37:a3:43:
01:3e:e5:1f:f4:fc:fe:6c:30:f2:8b:10:05:4e:bd:55:7d:e5:
77:02:40:6c:e8:f2:ce:26:52:3f:07:bb:09:38:2d:ac:77:0a:
06:15:2f:db:4e:9e:77:35:bf:fd:44:bb:d0:3a:7f:5f:7b:2e:
fb:f3:45:92:32:65:84:58:69:2b:90:45:7a:98:1b:3f:8f:b8:
e9:3b:7a:c3:b5:43:4a:fe:fb:6a:44:1a:cd:f4:ac:cf:18:54:
3b:00:fc:5b:1a:54:c9:cd:95:75:19:9b:85:93:bd:51:96:eb:
28:c9:ce:34:22:40:1a:f5:33:0a:37:1d:6c:7d:9e:c1:27:fb:
4f:b8:8d:a2:34:75:55:2a:36:81:57:a7:a7:1b:6c:5e:4d:d5:
7b:40:fa:44:d5:94:8d:fb:dc:c3:c1:9c:a6:ba:0b:63:5e:d9:
59:68:50:9b:cd:1d:ff:06:2c:0f:40:70:39:98:05:9f:68:d9:
0a:61:eb:ba:6f:5e:9d:15:6d:4c:18:e3:85:3c:72:cf:be:43:
d9:d5:5b:b2:16:94:70:f6:71:8f:13:04:2d:35:39:84:77:11:
25:28:f8:b9:bd:76:78:60:47:d3:c9:ea:3b:87:35:86:4f:b4:
02:ab:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:08 2025 by rpki-client