Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File: f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier: CY7xsQSm9Y434nvgpd0O6Bbn3M9jpu2k7FktDkArDMc=
Subject key identifier: 95:B1:46:E4:A3:76:3A:15:ED:43:BD:7A:37:70:BC:76:D8:D2:D9:7B
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 0194BCA9C3AD89582CFD15324FA0E25F3D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: 3dnDPxz7ckqbet07bGuPnzCedLvktnDv3pxT0H7yF2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c3:ad:89:58:2c:fd:15:32:4f:a0:e2:5f:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=95b146e4a3763a15ed43bd7a3770bc76d8d2d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:0e:e9:75:09:9d:a0:36:1a:45:8a:10:c3:
57:db:fc:56:54:b0:fa:64:8c:9c:81:da:68:b2:68:
39:4f:75:99:eb:17:9b:34:55:e1:94:c4:94:a0:5d:
4e:e6:3d:fa:c4:2b:21:d0:49:41:5d:94:2a:ab:53:
c4:48:92:7a:32:09:16:47:8c:58:12:8b:d3:9c:7f:
94:de:fe:17:b6:05:59:ed:8b:ec:0d:69:bc:4b:db:
c3:25:d6:f3:1d:18:fb:1f:63:93:71:cb:a2:a6:93:
f7:51:bb:fb:94:51:ee:e6:42:d5:9b:8a:a6:67:95:
9a:af:26:cc:f8:26:03:67:62:c2:0a:5b:7d:e7:b7:
56:ae:76:4c:30:5a:fd:07:b7:10:b3:79:73:d7:f3:
65:87:7c:a1:9c:62:3c:1e:03:68:38:aa:29:8a:61:
92:ac:04:d9:5c:7c:0e:11:61:a2:15:ff:18:b2:40:
7c:28:a7:42:4d:40:d2:d9:ad:11:c8:77:5d:32:cf:
97:99:17:97:86:40:fa:cd:5d:05:69:7f:53:69:b5:
59:82:77:08:d0:3c:f6:26:ca:47:33:f7:c4:8d:31:
9a:1e:bb:f2:b1:a8:70:5c:c2:3d:23:3a:b1:16:41:
84:fc:98:32:32:33:ea:67:8e:d5:a8:86:d1:63:02:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:46:E4:A3:76:3A:15:ED:43:BD:7A:37:70:BC:76:D8:D2:D9:7B
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:7d:d2:74:7d:68:fd:1e:e0:0a:b7:93:a1:1d:00:42:c3:
a1:f0:e7:fb:21:79:78:7f:64:fc:6d:62:ff:b9:2d:68:f6:44:
fa:cd:70:ce:55:9c:3d:a7:32:ab:69:dc:fc:99:94:d0:0c:36:
9e:e9:ac:08:4c:f7:6a:10:83:bf:be:56:b1:e5:78:65:b0:67:
5e:2e:af:1a:e0:c0:97:e8:99:c9:12:5f:d5:ca:c7:8e:ac:30:
4b:52:2f:f6:d3:05:cd:fe:11:a2:9f:eb:d3:57:60:90:06:6c:
58:60:65:f4:13:9d:60:fe:e8:57:81:0d:7a:64:96:10:97:47:
80:2b:ad:70:9b:81:0a:bd:fa:b7:02:5c:0a:b1:16:86:52:20:
fc:8b:6b:97:a3:9a:6a:6d:33:d9:3e:55:ed:47:ff:3a:7c:51:
c8:f1:51:f4:86:2c:49:32:2d:eb:3c:62:36:fb:a0:ee:c5:eb:
7d:13:3a:90:64:5f:d2:b0:af:09:fb:e7:f0:13:b6:a5:14:f9:
d0:1d:04:f9:fd:22:c3:a8:c1:b9:41:b6:3a:19:4f:a2:e7:f4:
9c:9e:2a:82:74:93:3c:01:fa:01:f1:a1:d5:1c:4b:52:ed:59:
0b:3c:ba:1b:82:71:b4:9f:e3:e3:41:16:99:bc:f3:31:fd:58:
99:7d:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client