Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: 11blJdMqUGBiPLGbYir0p2oAy2363IwHSK/kL0kvDzE=
Subject key identifier: 7B:F4:7B:72:2E:62:59:AE:70:9A:E8:39:DD:30:B7:C4:71:14:FF:9E
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 0194BC3C294FF35E4A06A816015014877582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 03FB
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: sUk5uvSGnEK9RP5gdvQZmhVrGRJK6vLT0zg/3t4Smug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:29:4f:f3:5e:4a:06:a8:16:01:50:14:87:75:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=7bf47b722e6259ae709ae839dd30b7c47114ff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:3f:5e:89:3a:16:7e:7d:0d:80:31:91:30:
8f:04:b1:fc:c2:4e:5a:8a:10:05:f1:17:35:46:de:
3a:0b:fc:8a:24:ad:ed:62:b3:42:d0:e4:47:09:18:
93:c9:d9:a1:4f:fb:d4:1e:9f:0c:d7:11:fc:12:2d:
31:26:57:45:ab:96:98:df:b8:b3:a7:6d:53:83:92:
17:94:2e:b7:92:46:6a:c0:cd:e5:8d:c8:a6:9a:89:
7c:3c:3c:4d:29:20:3f:cd:30:dc:ef:93:f0:f9:65:
db:26:a7:6d:29:9a:d8:e6:16:9c:37:74:34:e0:62:
18:63:88:c8:fb:f4:44:1b:ea:73:31:74:e7:73:fc:
95:08:64:af:8a:3f:84:09:b5:e6:98:4d:05:d0:b7:
0d:49:98:23:e8:43:74:68:d7:3a:c4:58:09:95:61:
d6:bc:e1:47:db:fd:4b:37:b7:43:0b:1d:87:fd:b0:
0a:3e:55:a4:84:cb:bf:d6:ed:d2:25:b4:5e:f2:b9:
57:72:50:9a:c8:a9:1f:32:6c:56:b9:b7:df:dc:ba:
dd:ad:34:1f:7e:7b:73:c8:ec:4b:8e:51:a3:3e:12:
6f:f8:3e:3a:ca:0b:ee:40:4f:04:26:de:18:57:96:
1a:df:31:16:ed:94:ca:f8:3c:52:b4:8f:45:d2:91:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:7B:72:2E:62:59:AE:70:9A:E8:39:DD:30:B7:C4:71:14:FF:9E
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:7f:6a:48:d2:76:e2:2e:2d:03:f1:09:b8:a8:1a:12:dc:
b5:1f:a0:23:53:8d:9f:4e:a9:2b:b0:29:87:fd:e8:ae:a5:fe:
4e:9f:38:b9:bf:d4:49:0a:10:65:6d:c9:b6:10:39:fa:1d:a6:
cb:6f:15:8f:3f:10:dc:b9:6c:98:57:c3:a9:34:f1:54:fd:2b:
ff:fa:85:1a:12:30:15:dc:27:45:6d:6f:66:b0:74:e7:a2:fc:
89:61:b9:da:38:4d:17:54:1f:7c:12:07:1b:19:18:b3:e9:49:
21:01:10:3b:af:a2:11:c5:5d:e3:c9:a8:ac:4a:70:12:87:3b:
ff:84:46:c5:db:bf:1f:24:e9:9b:f8:aa:6a:77:bf:e8:ba:82:
79:c5:bb:b9:a2:75:0f:2f:32:95:06:4e:f8:16:8d:8c:90:51:
54:ba:5b:41:f5:19:9b:23:35:a9:f9:9d:0d:b3:45:c7:a6:5b:
ef:89:9b:b3:89:31:b6:c7:25:74:4d:7b:7d:e8:64:3c:c6:7d:
a8:47:14:07:48:fa:05:ee:d3:05:4c:82:80:02:f4:a0:d6:9d:
b5:e5:8e:90:58:1f:f5:b8:f2:a7:9c:ca:b6:ae:6d:44:d7:e2:
f1:cf:48:4a:be:f3:4a:2b:8d:db:e8:33:af:d5:ca:9e:ab:03:
b6:58:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:50 2025 by rpki-client