
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.mft
File: fF0UX7s8iLQ9SfSQtrs5-GEFUX4.mft (raw, json)
Hash identifier: 8R/PU8qh3JM3emfCzAWwcYmOGz8k4WW4LWLIXq3GP98=
Subject key identifier: 39:DE:97:AB:CA:C0:2F:1E:F6:84:7F:C7:2E:09:B4:E2:E8:7C:A7:32
Authority key identifier: 7C:5D:14:5F:BB:3C:88:B4:3D:49:F4:90:B6:BB:39:F8:61:05:51:7E
Certificate issuer: /CN=7c5d145fbb3c88b43d49f490b6bb39f86105517e
Certificate serial: 15C4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.mft
Manifest number: 1E
Signing time: Mon 28 Mar 2022 04:00:34 +0000
Manifest this update: Mon 28 Mar 2022 04:00:34 +0000
Manifest next update: Tue 29 Mar 2022 04:00:34 +0000
Files and hashes: 1: CsXp523GNrriqyGAkuqyWwi4up0.roa (hash: CSQUclIHltZTPd31PMpVfo2cvz5xGcuNDHv/S8Edc1c=)
2: fF0UX7s8iLQ9SfSQtrs5-GEFUX4.crl (hash: /Vu0MhZaFlnR5Eg+0SIOF822AG22b77gNhGPUirOYnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1426602 (0x15c4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5d145fbb3c88b43d49f490b6bb39f86105517e
Validity
Not Before: Mar 28 04:00:34 2022 GMT
Not After : Mar 29 04:00:34 2022 GMT
Subject: CN=39de97abcac02f1ef6847fc72e09b4e2e87ca732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:08:9e:9e:39:d4:d2:9c:c4:66:9d:2e:cd:
7b:87:3e:c0:01:71:b8:a8:e1:07:57:24:13:d0:76:
09:46:5d:ec:dc:ce:3f:cc:9d:d0:e5:e1:26:bf:e9:
fc:ca:91:75:69:3e:be:87:ab:5c:1f:1b:18:34:8d:
ad:fc:d5:44:d5:65:dc:17:70:27:74:cc:5c:52:69:
9e:d5:15:16:22:33:f7:51:1c:b9:c3:17:6d:da:bb:
d3:e6:8b:b9:4e:37:bc:eb:2c:0f:4a:51:6b:3c:a7:
ce:7c:c9:3f:86:79:ba:2b:cf:a2:29:e4:8c:f4:64:
3d:2e:a0:b4:ff:50:ff:94:b9:64:de:4f:3a:a6:07:
17:d7:b3:38:6a:e4:0c:e5:89:d9:21:42:1b:a6:a9:
f3:44:d7:0b:8c:bc:b8:34:68:67:3c:1a:8c:32:91:
cf:81:f0:cd:8d:86:cb:65:51:a3:30:24:82:95:14:
53:5b:f8:07:da:af:c1:51:e9:36:c4:f9:28:67:05:
92:e6:c7:f6:7e:80:b0:b5:3b:06:0d:53:26:aa:b0:
72:2b:c6:3a:d9:fb:22:11:a1:a8:7a:06:1f:f1:60:
9b:cc:17:3c:6c:1b:5f:b1:6b:0c:5d:3b:1e:aa:73:
6f:93:5e:d0:59:64:01:a4:09:fc:3d:b4:cb:c5:d1:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:97:AB:CA:C0:2F:1E:F6:84:7F:C7:2E:09:B4:E2:E8:7C:A7:32
X509v3 Authority Key Identifier:
keyid:7C:5D:14:5F:BB:3C:88:B4:3D:49:F4:90:B6:BB:39:F8:61:05:51:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3504c-4639-4c1d-aeb2-4902ff47faee/1/fF0UX7s8iLQ9SfSQtrs5-GEFUX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:15:9b:f8:5d:1b:08:28:e3:74:ee:61:61:71:03:14:dc:61:
42:62:c5:73:b3:b8:06:a1:ec:00:d3:bd:fc:42:52:3b:61:57:
f5:3c:48:8e:6d:3c:2f:99:43:1a:c6:14:e7:97:fd:ee:7d:19:
09:e9:bd:37:a7:c8:04:6e:f0:71:b4:2d:06:7f:4f:3d:a9:ac:
9a:32:9f:9f:d4:e2:9e:d9:d2:8f:e0:4d:8e:7c:ba:9b:9f:3e:
86:11:c2:6a:30:24:f8:a6:9f:ec:67:22:54:c3:b4:cd:24:6a:
94:d7:a9:60:e6:08:75:f8:f1:c8:d5:2b:60:ff:41:f6:21:36:
43:3b:9c:70:c2:1e:ce:12:ca:bf:83:78:68:40:6f:71:e7:8f:
fe:55:c9:05:63:95:c4:c8:40:22:88:00:8c:46:8d:a2:d5:4b:
5c:55:09:d1:69:5e:62:1d:3a:34:f7:4e:57:b1:45:22:ae:6f:
23:80:87:37:9f:0d:51:c1:d8:59:13:fa:6f:a7:41:d7:bb:ee:
94:2a:91:e4:b6:88:d9:69:e0:6d:a4:f4:34:16:a9:ff:5d:49:
71:33:86:47:b9:b2:27:45:2f:12:42:46:6b:78:45:ee:dc:9c:
03:b2:b6:f3:98:6c:c7:3f:36:d0:e1:f3:e3:6e:79:4c:71:ed:
58:cd:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:26:10 2025 by rpki-client