Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: TxKb/l0bHUFXn4wRps82t9GHE9MBda7PTCClQmTwBLc=
Subject key identifier: E2:08:DC:A2:D9:97:75:3B:6F:7D:E7:BE:AA:B1:F4:B3:52:F4:CA:44
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0194BC04C6BACE37F9ADA970C5129D3C66E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1369
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: /mAyRAO3N3Ogr9B5CxvxWSOpdki1lGWtHs5lJ2mZOhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:ba:ce:37:f9:ad:a9:70:c5:12:9d:3c:66:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=e208dca2d997753b6f7de7beaab1f4b352f4ca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:83:dd:73:30:8c:87:2d:60:1c:c6:fa:32:
1e:81:78:c2:22:3e:51:c9:37:8a:49:8a:86:b6:4c:
6c:68:fe:dd:4d:ce:47:f4:b7:e3:8b:82:8c:08:b9:
a3:5b:ef:1d:91:80:cc:d1:5d:ae:4f:a2:f7:c8:8a:
82:83:39:70:b3:37:f6:55:87:a8:df:62:0b:7c:eb:
6b:dc:4f:c3:da:d9:ab:58:31:bd:a4:c7:bc:36:24:
47:59:28:f5:af:c3:23:23:85:84:c9:56:85:41:29:
79:01:24:ed:63:09:23:40:3d:b1:fa:28:42:36:ed:
41:87:4d:c1:24:94:a1:9c:e8:80:fc:8f:8a:8a:f0:
93:62:b1:07:70:de:7e:01:41:da:27:09:47:72:4e:
a0:d5:db:0e:03:e8:76:74:b6:20:22:52:83:b6:f6:
ab:2c:69:0d:5c:4e:4f:29:f1:b5:fd:a2:7c:d2:1c:
bd:f8:51:9d:ea:4b:2a:33:54:56:9d:7c:a4:dd:b7:
90:bf:68:56:7a:13:72:25:41:36:c7:aa:bb:00:23:
08:b8:d8:20:18:98:b8:84:c0:6c:43:27:e1:1f:dc:
91:d9:2a:8e:bc:d8:2a:0a:ff:a0:0e:40:47:3d:af:
78:dc:4d:04:1d:b0:7b:b6:d9:b8:d0:a3:7e:1c:6a:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:DC:A2:D9:97:75:3B:6F:7D:E7:BE:AA:B1:F4:B3:52:F4:CA:44
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:ed:ad:57:c0:53:19:87:83:d9:e2:bf:de:2e:a7:a6:39:
8b:65:c8:0f:c6:1d:8a:6a:eb:ca:73:ac:da:66:f5:6a:87:a1:
83:3a:84:e6:5b:37:92:d1:15:40:55:d6:73:6a:33:0b:45:ad:
ca:c4:4d:c2:ef:3b:a6:3c:d1:5f:b4:39:ad:1d:81:d3:1b:bf:
8c:5e:43:00:74:07:24:0c:43:a6:f6:44:5c:59:27:86:1b:aa:
5a:e9:b7:be:3a:6f:07:87:59:bd:e1:36:a0:12:b5:d4:74:8c:
bc:99:f6:cd:55:27:95:a0:06:07:00:79:7b:87:84:2c:d6:32:
0f:8f:3e:bd:2d:24:56:52:d3:f5:86:8b:77:69:63:b9:17:76:
1c:f1:c2:29:85:c9:64:16:da:be:ac:c0:8c:ca:f0:43:2a:bd:
98:0a:45:0a:bb:d3:84:f8:6b:3f:46:6d:75:9b:f7:59:83:50:
e8:8a:67:41:30:f8:c4:1f:a9:96:da:82:89:3e:69:44:9d:53:
22:6f:2b:2c:39:b7:da:3c:2c:35:04:af:87:b1:b0:96:51:93:
20:8e:47:27:04:bc:83:75:e0:28:d5:bd:44:e5:27:7a:f2:c9:
be:2d:45:4f:71:04:c8:4b:4a:de:6e:fe:07:99:f1:9e:69:10:
17:3d:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:40 2025 by rpki-client