Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.mft
File: f-C3k9w8HdWtZA3opJqn7K2zC6s.mft (raw, json)
Hash identifier: OpYfi7NItOQVihQkOfaEr4tFKMzlAr088ogM3Xo2j14=
Subject key identifier: 20:78:32:C7:C9:03:79:FC:B2:94:CD:66:B6:D3:FB:00:EE:C8:92:8A
Authority key identifier: 7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
Certificate issuer: /CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Certificate serial: 0193AD392E69E3D788A41A1A996D1DCE2B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.mft
Manifest number: 139E
Signing time: Mon 09 Dec 2024 21:00:25 +0000
Manifest this update: Mon 09 Dec 2024 21:00:25 +0000
Manifest next update: Tue 10 Dec 2024 21:00:25 +0000
Files and hashes: 1: f-C3k9w8HdWtZA3opJqn7K2zC6s.crl (hash: 4rZNwuvWp+GEMaVKfcTxYz4pCpGFDS5VwcQwP4+dbeQ=)
2: zafrxblJXV6D1L6rsPVTYMWCIdw.roa (hash: m5QqgrBPhPePJOk7E7AbMhIbo3HMXxRmuirRZuU61Ls=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:39:2e:69:e3:d7:88:a4:1a:1a:99:6d:1d:ce:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0b793dc3c1dd5ad640de8a49aa7ecadb30bab
Validity
Not Before: Dec 9 21:00:25 2024 GMT
Not After : Dec 10 21:00:25 2024 GMT
Subject: CN=207832c7c90379fcb294cd66b6d3fb00eec8928a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:ae:ba:a4:1e:dc:82:a4:db:1e:8d:77:29:
0c:1e:12:ba:98:23:41:98:47:3c:b5:fe:c3:23:eb:
18:18:b6:89:df:e8:5b:dd:e5:a6:2a:38:ba:cb:7d:
1c:95:aa:74:58:e6:0e:2a:2e:90:e3:88:eb:d5:f9:
b4:1f:c6:52:36:40:6d:fd:cb:4d:eb:a8:e4:cc:b5:
33:c2:2d:c7:ca:7c:50:21:28:98:07:95:fd:79:d9:
15:bb:6f:d0:a4:33:da:6a:7b:ec:c7:d7:25:0c:59:
00:e7:5e:ef:5c:9c:ef:07:c3:53:70:28:75:31:20:
18:ff:83:17:b6:ca:01:bf:c0:41:67:cd:ba:37:31:
55:ca:b4:fc:e9:5b:bf:97:4a:1d:80:c9:ca:65:73:
64:80:ed:f5:8d:71:3c:aa:26:7f:ca:ee:3b:8d:07:
4f:7c:fb:7b:c0:be:08:32:9b:c2:ec:30:b3:9d:8a:
65:30:be:29:a6:c7:0e:b8:6f:90:23:bc:19:5c:09:
46:fb:1a:c0:93:ab:c8:61:93:b2:18:cd:4e:77:fb:
d6:37:62:b2:1a:13:fe:c0:22:d9:de:2d:15:68:8d:
52:7a:1d:af:56:62:6d:2b:ba:6a:bc:25:ce:c9:47:
4e:01:a3:75:5b:c9:a6:50:d8:57:65:22:6a:a5:96:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:32:C7:C9:03:79:FC:B2:94:CD:66:B6:D3:FB:00:EE:C8:92:8A
X509v3 Authority Key Identifier:
keyid:7F:E0:B7:93:DC:3C:1D:D5:AD:64:0D:E8:A4:9A:A7:EC:AD:B3:0B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-C3k9w8HdWtZA3opJqn7K2zC6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/106c8e-de65-45a8-a3e8-f734d94f019c/1/f-C3k9w8HdWtZA3opJqn7K2zC6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:0c:58:01:ea:45:fb:88:a2:b3:99:1f:ae:26:79:8d:c8:
c7:66:fd:09:e8:9f:ee:ec:bc:09:7b:d2:36:2e:be:23:51:33:
03:d4:49:6d:83:61:c2:d4:8d:1c:6a:73:a2:d5:d9:fb:a0:fc:
d4:a9:77:b4:af:6a:95:6e:98:2b:62:c5:10:68:c1:82:39:45:
98:60:32:77:1d:29:d9:f8:17:62:69:e6:75:3a:ee:5b:f5:26:
90:c6:1b:fb:f9:ce:2f:d2:74:85:c2:c0:cd:3c:98:1d:ff:e9:
ef:98:c5:c2:42:85:7b:79:42:f1:08:90:88:c8:7b:7d:27:6c:
3e:cd:ff:d8:8b:4c:8f:51:2c:12:de:20:68:fb:d4:6e:dd:9d:
b9:34:63:6a:f9:c8:57:00:ac:c6:16:9d:bd:b2:c4:09:07:2b:
3e:6d:98:45:3f:1f:f3:a7:28:99:10:f8:52:a0:b8:62:77:fe:
07:34:c8:33:84:5b:ab:a1:53:56:f0:c9:c9:50:68:e9:3c:f1:
32:dd:2f:0e:96:87:7e:d4:47:79:92:d0:c9:ab:fb:70:86:84:
ba:fd:b9:ca:ad:7d:5a:56:52:87:87:3d:8a:df:69:42:ee:71:
06:b8:c3:08:3c:e1:9d:12:52:d9:34:f7:3b:6c:49:91:ed:a8:
9a:81:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:03:42 2025 by rpki-client