Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: oR6PtYZC6563H6SguV8Y/RCvqY2k1ql9gLpNF97N4a0=
Subject key identifier: 2A:58:68:FF:AB:19:6F:31:CA:F6:32:61:B6:AA:8A:E8:C5:30:B4:A1
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 0194BD8562F4B8C366461564183DE21B2B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 0C45
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: 9vJ3jXlt/f10aZ757oygN8N3orJkR9lOjLsty72488g=)
2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:f4:b8:c3:66:46:15:64:18:3d:e2:1b:2b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=2a5868ffab196f31caf63261b6aa8ae8c530b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:1b:d7:36:d5:48:3a:d2:0b:c8:03:07:86:
2f:9d:28:a2:a1:d9:0c:19:8a:36:92:62:b0:21:de:
9e:f6:9f:f9:b8:e3:e2:00:b9:d7:a5:7d:7e:94:4d:
8f:12:a5:dd:3d:77:8f:ed:ad:f0:9b:f8:67:eb:4f:
7d:b5:a8:77:11:a0:2d:42:92:16:9c:4a:4d:9c:60:
3a:6c:c7:3b:3e:95:34:62:f3:76:2d:50:e3:94:a3:
f8:2d:b6:6f:e4:cd:fd:b3:a4:a0:92:39:70:80:44:
03:3e:dc:1a:0d:1d:c4:89:2c:bb:35:8f:15:55:23:
19:c3:19:12:d8:80:43:36:49:4d:4a:d7:82:eb:80:
3a:2f:b2:30:31:4b:02:d4:f2:b1:86:04:17:e6:7d:
6b:8b:30:0f:0a:56:39:2b:83:58:32:b2:6d:af:2a:
b4:b1:98:cf:ba:bd:44:2f:36:ef:62:47:87:ec:f9:
9a:ad:41:53:53:c8:32:aa:24:f1:33:46:f3:78:aa:
fb:ae:6a:63:c1:68:5a:75:c2:36:5e:11:22:9b:6b:
27:1c:44:1a:ef:8b:1d:ef:7a:87:90:cf:25:c7:b5:
89:25:b7:d9:2d:80:04:f8:e9:12:1d:44:a0:a5:f2:
8d:69:83:72:5f:09:e4:8a:5f:06:f7:68:e3:0f:da:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:68:FF:AB:19:6F:31:CA:F6:32:61:B6:AA:8A:E8:C5:30:B4:A1
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c1:9c:88:cd:78:34:b5:be:fa:b6:1e:2c:24:22:6a:66:cc:
04:3d:d3:a7:fe:fe:94:94:50:b6:48:09:6e:08:a5:35:03:01:
1f:08:2a:8e:e7:17:b3:aa:d4:f4:54:a9:8a:82:b9:51:77:94:
c6:60:63:4e:bb:d7:12:d0:f3:1c:b9:a6:4c:a4:6b:c4:19:59:
e5:6a:94:34:81:44:55:69:ff:ef:5c:db:dc:e8:e9:48:a7:86:
96:b3:df:68:e7:a5:65:5c:30:4d:f2:13:40:e8:82:e3:4e:6b:
db:6a:b2:9b:09:9b:e5:62:a8:be:cb:19:00:f5:53:cf:33:95:
bb:0f:7b:bb:71:68:55:ef:a0:77:e3:06:0b:4a:6d:44:38:0d:
82:c6:f5:1f:c1:bc:4b:92:b8:9f:02:db:6d:6a:65:de:b0:88:
35:2e:fd:2c:73:e5:93:15:0c:6c:fb:a1:c9:5b:73:95:c0:c6:
c7:6f:d6:c0:21:42:66:8e:ed:48:96:6f:5c:3d:eb:98:94:98:
b9:3b:a7:77:6d:61:08:57:65:00:a7:3b:a7:e4:aa:2a:14:fe:
d1:fb:04:57:cd:d1:63:93:82:be:7f:99:23:9d:ec:37:51:a4:
41:bf:35:70:89:1b:9f:0c:26:4a:ee:f4:fe:da:1e:c8:d8:5e:
ac:60:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:38 2025 by rpki-client