Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: 4/FXoYhfBa+60MPwROK9it0EILVNcQoEbglwsglClRI=
Subject key identifier: 3D:2A:23:0E:80:4B:5C:14:72:71:A9:BF:5D:80:5C:F0:6D:6C:4D:55
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 0194BCA9E65DC891280B9AA820A63E049BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 12C2
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: D+JZsEQ7X10DoadpAbqDqhMlO83zaRBFCiCkaaTfaTI=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e6:5d:c8:91:28:0b:9a:a8:20:a6:3e:04:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=3d2a230e804b5c147271a9bf5d805cf06d6c4d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:ee:8b:59:c2:b8:06:2a:b2:6b:ed:2c:d3:
4c:0f:4e:8b:53:f1:a2:aa:54:da:d6:68:5a:6a:38:
2a:1b:26:e1:90:07:6a:86:2f:f8:58:b9:3c:c3:83:
03:bb:11:0f:ec:38:58:da:2e:20:e7:52:fc:9c:cd:
d4:a1:da:2c:5c:ac:0c:21:da:a4:cd:d9:a4:2f:a3:
92:4e:26:e0:cf:af:5d:08:cf:f5:65:a5:7c:ab:1a:
86:4a:a9:41:67:59:d2:ba:45:df:e3:28:50:2e:ce:
54:39:e8:d3:9f:8f:d4:39:08:5e:62:56:0d:31:c2:
70:2b:97:6c:8e:c4:40:5d:3c:b7:80:8b:be:ff:43:
9c:49:24:53:d3:11:2e:61:55:b5:7f:cd:88:86:eb:
d6:8a:7f:c4:42:65:42:ad:e9:9c:1b:f2:ee:83:96:
a5:ea:95:e2:bb:5f:7d:50:b5:0e:5e:29:e7:ee:76:
69:43:26:87:32:f1:80:bc:1c:04:e0:0d:04:7c:56:
7f:d4:08:73:6f:fb:b0:66:8d:ce:21:43:97:b6:62:
f3:b4:e4:ea:bb:91:9f:e5:ff:70:32:dd:79:ca:35:
ac:83:10:3c:52:4c:6a:b3:0b:7f:dd:eb:0f:19:9a:
e2:a3:f3:db:ac:4f:bd:c9:88:27:af:fc:fd:94:a3:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:23:0E:80:4B:5C:14:72:71:A9:BF:5D:80:5C:F0:6D:6C:4D:55
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:a4:0c:a8:60:1f:4e:b3:e5:37:ba:10:4b:0d:34:31:62:
21:98:db:59:3d:7b:80:7d:b6:51:a7:65:d1:eb:8c:79:91:20:
b1:5b:a3:de:42:11:33:a9:cf:b3:ee:dd:5e:67:e7:fe:42:c1:
f9:5d:08:30:21:51:e3:d7:a5:d7:41:c6:8c:61:b2:27:8f:26:
90:6e:e8:28:43:1f:f0:c7:52:e4:2d:5d:b5:01:c4:1a:65:f6:
a2:3e:72:f6:af:ba:97:6c:45:5a:1f:eb:fa:a2:52:44:21:b7:
9b:97:fe:ad:33:8a:1d:16:e1:d9:c2:f0:6d:5a:2c:3b:90:9c:
59:be:ff:e5:8f:58:dd:04:88:7a:2a:90:d5:19:24:a4:6f:3d:
c7:b8:6b:62:83:46:53:d7:e0:db:f2:c4:f1:2c:e0:8c:7f:64:
e4:15:2d:80:0e:42:60:29:16:c4:ed:d6:58:38:12:93:88:c6:
4d:f8:21:f7:7b:26:3b:3a:87:4e:0b:b6:87:ea:4d:06:a5:ba:
b1:96:73:6b:6d:13:dd:c6:1d:b2:4e:10:89:56:cb:c5:cb:a3:
4e:6d:75:79:0a:97:95:c8:3c:a6:01:e6:2d:00:26:f1:e9:04:
6d:f2:5d:c0:84:be:2f:73:8f:bb:37:ce:b4:21:f4:8d:9f:22:
c0:12:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:34 2025 by rpki-client