Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: BV/R33inhTNlhmJvLqneH9Bq117w0pKGTafhgtgLCxk=
Subject key identifier: 0D:64:D8:D5:E8:81:86:B2:4B:D7:12:61:F5:50:4E:CC:7B:33:66:4F
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 0194BD4E5A0D2D568F178A82B45FE9FD12F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: r0uNzE67AkPj7v858tZCu002iZ/InsUBfmRKGmI6bRc=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:0d:2d:56:8f:17:8a:82:b4:5f:e9:fd:12:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=0d64d8d5e88186b24bd71261f5504ecc7b33664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:0b:92:ab:93:74:87:11:77:97:ab:89:12:
a0:59:ed:ee:11:4d:97:b1:7d:39:18:de:67:27:4a:
d3:6a:9a:a4:80:7d:55:ce:7e:b5:ed:3f:ec:61:19:
d0:ae:33:b0:d5:13:08:81:c2:10:d6:d8:18:7d:b2:
95:37:db:ac:ec:21:1f:8e:cd:29:16:45:23:0f:d7:
75:90:62:b7:6d:24:8e:0d:8f:12:13:bf:a2:cb:8b:
ee:fa:72:f6:b5:7e:bd:02:3d:c7:da:87:00:55:f6:
50:54:8e:b7:62:dc:8c:bf:ea:8b:c1:8e:91:5c:84:
fa:7f:69:63:a6:a2:1d:35:5b:d6:de:79:95:cc:6b:
e9:50:98:fa:70:4f:5a:c0:72:0e:6f:fd:0f:f3:97:
03:c2:68:f2:22:58:32:32:6a:84:80:e4:15:52:ff:
de:d3:46:82:0b:9e:f1:68:b2:07:30:03:ab:9f:a5:
40:28:cf:89:24:0f:d9:a6:41:bb:1b:a8:07:e0:90:
8e:7e:71:eb:f3:9c:a7:0c:40:fd:0a:98:fc:fd:08:
c7:9a:6d:c6:c2:ac:b8:07:df:0f:c5:c3:51:e9:5c:
66:bb:93:02:92:f2:f3:61:c3:19:85:47:29:c0:77:
08:92:d7:e9:dd:db:91:af:cc:a5:6b:e2:4b:67:17:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:D8:D5:E8:81:86:B2:4B:D7:12:61:F5:50:4E:CC:7B:33:66:4F
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:39:9d:b1:ad:02:e4:89:c6:f0:34:53:2d:ed:c1:d7:f5:
3a:ac:ae:06:da:59:a7:eb:16:4d:7c:53:57:a4:c1:24:09:ab:
13:7f:fb:cc:c3:28:e3:d2:c2:22:29:ee:d5:8e:ef:68:75:29:
48:8e:6d:99:31:55:f7:71:ff:63:60:d7:a4:7b:0b:f8:07:55:
ef:28:63:a7:97:8a:c3:0e:29:60:f0:6e:17:3b:e1:5d:85:a5:
0d:be:d5:f9:e4:fd:05:22:57:1e:ac:96:f8:6f:a8:a6:79:1a:
9d:3a:7e:c7:16:d6:de:b5:3e:89:c3:01:15:f2:05:ee:b7:fe:
aa:d0:1c:68:90:50:a7:01:5a:1c:4a:ab:98:2f:8d:2c:0f:a3:
9a:7f:77:01:fa:f3:d2:ab:71:f2:ea:ce:6b:05:79:98:71:6c:
b9:b0:1e:84:32:ef:15:2c:36:15:c6:c0:88:10:48:d9:35:4e:
c0:45:77:59:13:8e:41:12:5f:56:ba:bd:23:e6:71:f0:b0:16:
44:c1:09:3a:b0:0c:ea:18:34:ed:dd:0a:a3:78:6d:92:5e:d5:
28:33:1c:13:86:f8:c6:ae:30:c8:3f:e5:53:3b:0c:db:41:0c:
fc:5b:95:12:b6:eb:c6:32:14:98:d2:fa:47:81:19:6e:af:88:
4e:98:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:04 2025 by rpki-client