Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: b97e9zd+aeJZAYXWUXYCDjkvflqQXw5bIvmEnjCCJk4=
Subject key identifier: D9:89:A2:1C:9B:BC:70:3D:9E:CC:98:BC:A3:DD:C6:EB:42:96:13:D0
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 0194BC0502AB63A996F201D403E53F2FB88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0DF6
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: rP5jcYCNXTAsd4pnpafca6ytihVoOZsdR6PsSNXQyD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:02:ab:63:a9:96:f2:01:d4:03:e5:3f:2f:b8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=d989a21c9bbc703d9ecc98bca3ddc6eb429613d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:0a:f6:60:ab:96:11:d9:4e:ec:4f:83:5d:
06:16:f8:06:39:61:ea:c6:30:d5:4f:4e:0f:bb:f6:
cd:10:51:c5:34:09:4a:65:ca:10:db:8b:39:c5:eb:
a1:65:04:d2:c4:35:19:f4:ac:55:05:f5:63:19:4f:
4c:84:f8:2d:b4:5e:b5:9d:92:53:4f:99:cb:6f:ae:
74:b8:4d:7b:fc:2f:a4:fd:fc:f2:82:51:82:14:77:
a9:80:a5:c6:a0:41:6c:23:08:5b:18:fb:b7:41:99:
99:10:ce:42:59:e4:d7:70:f3:dc:80:b1:41:97:ce:
5d:65:a8:43:4a:20:f9:d4:1d:b9:fb:51:fb:3d:7d:
bf:f6:17:05:bf:7d:23:36:df:c1:85:fc:55:52:9a:
1b:9f:d1:8a:9e:c8:57:c4:f5:bf:2e:45:af:1e:dd:
0f:67:28:d2:e3:36:42:ac:e5:0a:86:e8:e1:97:c4:
4a:c4:54:63:d6:08:c7:ec:f6:3c:3f:8b:c5:ac:5f:
d4:b2:a1:b6:e0:c4:17:22:eb:fc:6e:df:4a:26:14:
12:c8:86:99:94:b6:c8:20:e6:1b:56:2d:62:6b:b8:
95:cc:05:b8:48:83:29:e5:5b:ef:2c:84:24:1b:97:
c4:e8:d5:02:bc:ec:0c:41:ed:65:42:df:b1:81:bf:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:A2:1C:9B:BC:70:3D:9E:CC:98:BC:A3:DD:C6:EB:42:96:13:D0
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:0f:ca:88:2e:b5:04:bc:ca:ea:f6:7e:30:32:8f:18:12:
95:50:60:2a:df:6b:e8:d5:36:80:d7:ca:20:03:8d:49:44:7e:
61:b4:23:5f:55:3f:9c:81:56:f9:69:50:1d:bd:44:73:98:b4:
8f:39:2e:96:e5:ff:08:2b:30:5b:24:36:4f:0e:8c:88:2b:b4:
4e:3d:95:20:71:08:28:0c:38:1f:b3:59:f1:56:9b:8a:7a:97:
ef:e5:ae:0d:85:17:6d:5b:49:27:e1:8e:84:90:7c:f3:40:69:
7e:ec:53:05:41:df:15:aa:fc:66:92:5d:49:9c:71:a1:e4:7e:
58:1b:0a:a2:27:c1:23:1a:73:87:f9:c5:6b:fb:62:ed:ef:96:
7a:d8:70:a4:76:a3:33:0a:9c:13:fd:df:4e:59:4d:da:c2:89:
5c:a2:c4:3e:20:c7:15:3f:da:84:f1:f7:fd:69:96:c4:4d:db:
a3:87:7e:41:8c:cd:c3:cb:d7:d7:bd:f5:57:23:f1:7f:a7:32:
80:62:b9:10:f1:34:ea:87:10:6b:01:68:84:ef:3e:2a:d1:13:
d6:ad:ec:64:3a:61:62:3b:ff:6e:fa:db:c4:a5:27:dd:eb:cb:
d8:4a:84:e3:41:f8:d9:50:fc:0c:5f:a8:44:d7:3d:12:3f:a3:
de:bd:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:49 2025 by rpki-client