Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: tGgRD1r7uKUwRwdo8aO0CrJshZrs5Q8S9F1+Wlgbipo=
Subject key identifier: CC:CC:FB:75:6D:38:FB:15:FD:E8:A2:B6:55:D0:A8:08:E9:FE:A4:66
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 0194BC3C2FFD16B8D4449CA38429379B8AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1168
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: 10jMqopgZRihHe8dhsZZpQ+SRkN9pUUW6nNYdRUim7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2f:fd:16:b8:d4:44:9c:a3:84:29:37:9b:8a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=ccccfb756d38fb15fde8a2b655d0a808e9fea466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:34:8d:8d:2a:fa:18:8c:3c:66:32:78:ac:
8e:24:98:f2:c8:44:e5:f4:fa:b2:ca:de:cb:da:ac:
07:80:89:09:69:08:eb:08:b9:09:4b:57:74:b1:64:
9e:2c:ff:fa:21:6b:1e:cf:e5:95:5e:a7:7a:37:db:
64:d1:17:89:ef:45:9d:fe:59:76:0a:8e:99:b2:56:
fa:ac:ac:2c:7c:3c:7d:49:0b:1a:99:e2:f4:02:4f:
ed:c8:20:fc:6f:82:80:43:c5:4d:10:a4:6b:2a:7c:
36:ae:22:bd:39:40:07:12:a9:e1:f7:1f:96:07:74:
2b:0b:47:60:d3:05:0c:f6:0e:26:88:2e:36:5b:b1:
b3:05:fb:48:1d:9d:eb:32:76:e6:5a:fe:20:58:04:
eb:62:df:fd:2b:3c:79:37:3f:98:f3:a8:81:e1:c5:
e8:eb:c5:aa:44:92:ed:b0:51:38:67:c9:18:53:97:
44:97:ee:76:c4:89:b2:3b:26:0e:ac:d4:0a:c7:2d:
df:e4:b9:ae:c7:82:cd:f8:b7:4b:91:79:ec:25:93:
1d:ec:0f:29:46:bc:02:7e:4e:a0:94:2f:12:44:1c:
cf:2f:62:ab:bd:60:4a:7a:07:95:21:47:f3:ff:a3:
46:be:cd:d0:a2:78:42:aa:78:92:5d:07:99:48:f0:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:FB:75:6D:38:FB:15:FD:E8:A2:B6:55:D0:A8:08:E9:FE:A4:66
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:63:5c:7a:c7:f1:72:33:ca:e6:07:cd:9e:d9:2e:a8:19:
d8:e1:4c:86:07:57:63:20:52:4e:98:f6:d8:4f:94:a3:8f:50:
55:ad:e8:44:58:db:ef:5c:5a:14:1e:da:ae:ff:b3:34:7c:36:
cf:96:2b:1d:f1:80:ee:c3:9f:0c:af:eb:4e:6a:7b:66:8a:3a:
81:72:32:63:1b:30:d8:68:0b:91:95:44:f2:4d:07:f4:5a:18:
50:36:1c:b1:ac:94:39:96:ae:f8:d5:4f:3a:cc:03:4f:15:0c:
80:ff:3a:e3:d2:19:7d:93:49:8c:43:6f:f2:70:a7:ae:3b:bd:
53:ee:fc:45:0e:35:1c:06:cc:f7:81:c3:06:10:b5:3e:36:9b:
a7:7e:b7:ff:6b:a0:3b:d8:6b:41:d3:a4:94:5b:0c:61:93:1b:
ea:de:15:a3:5b:9b:79:e4:51:95:48:5e:c5:c3:10:37:32:69:
e3:e7:ab:32:b4:64:6a:df:aa:cd:f9:c9:cd:70:5d:ea:7e:a3:
8b:6b:c0:07:d9:9e:20:02:7d:08:73:31:e0:00:24:f7:96:5e:
cb:ac:ce:4b:fc:64:f6:3b:9f:c9:f1:26:0b:45:b1:ed:34:47:
f3:4e:51:b1:0e:80:68:29:b7:4d:74:d1:91:d4:84:1f:80:93:
0b:8c:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:24 2025 by rpki-client