Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: jyqY+5X9v7/XbyKQim5NUquAX+FLSIrMjrzKtdIQ4qA=
Subject key identifier: 50:1D:53:F9:94:6D:A4:A3:80:BC:61:1C:54:3C:DC:9B:24:E2:EB:30
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0194BCE0AD90C6C9B16A81D5F21D86D90BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 11D1
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: 3GJiTBrBjNvZp7AalkH+bhKVUWf+BjUj6CWbJDvSI2w=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:90:c6:c9:b1:6a:81:d5:f2:1d:86:d9:0b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=501d53f9946da4a380bc611c543cdc9b24e2eb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:24:dd:b7:97:05:a0:12:4c:cc:a4:77:eb:
7a:74:34:0a:f9:f6:97:41:3d:e2:f2:c6:ec:92:2d:
66:af:9c:25:81:d6:43:f9:40:0e:91:b2:36:70:31:
4d:22:d0:bd:03:31:e0:c7:2c:c9:61:f7:06:4f:e6:
1d:d3:38:30:1e:0b:c0:ce:81:57:33:a1:6e:7a:eb:
45:6b:24:3c:d4:6c:04:ea:c6:f5:58:31:b5:a7:72:
3f:da:be:89:7a:23:e8:6a:a0:7d:a9:02:74:16:1d:
5e:22:8e:08:af:d8:79:ac:0f:8a:6b:53:06:c4:96:
a3:32:80:07:47:cb:b0:b4:c8:97:5b:90:9e:e2:e4:
fb:3e:00:51:fb:3d:37:f8:55:cc:4e:2a:bd:df:2b:
9d:df:22:e2:b8:55:84:d0:71:c6:86:b9:a5:55:42:
5a:ec:71:0e:b1:d6:23:80:3c:67:28:42:4f:1d:66:
b7:0f:61:b6:12:44:d8:1d:40:cb:71:39:76:23:d1:
df:6e:81:48:23:9b:24:d1:eb:f3:30:73:91:d2:ee:
b4:e6:d4:e5:f1:1f:a9:03:0c:08:df:c6:9b:9f:70:
2c:32:7a:d6:16:6c:84:3f:91:28:f3:80:c0:b3:b0:
22:68:db:19:a6:0d:d0:c6:5c:aa:45:e0:aa:d5:a7:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:53:F9:94:6D:A4:A3:80:BC:61:1C:54:3C:DC:9B:24:E2:EB:30
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:11:d0:6a:e1:98:e4:d0:59:14:17:8a:f2:5e:77:bd:b0:31:
c1:71:82:8b:07:56:59:a4:5c:af:0e:df:0c:f4:76:e5:0a:e7:
3b:15:41:3a:68:bd:4a:25:1f:d6:17:c3:44:74:f9:42:e1:2b:
1c:81:c6:c1:fa:a9:09:fe:f7:25:8a:8d:fb:77:85:4c:37:bb:
50:56:c0:0a:f9:b8:92:69:7c:ec:3c:ca:4e:b1:6e:a8:63:db:
6a:2e:10:b3:ce:11:c8:51:46:fc:fe:5c:91:35:96:95:ea:48:
45:ad:79:18:f9:c8:fd:17:84:0f:0a:31:81:aa:ab:97:17:6e:
4b:00:1c:ed:50:35:44:8e:7c:90:f2:c7:ed:e1:cd:20:a1:d7:
e0:8b:8d:16:3d:c9:3c:88:67:93:c7:9b:33:91:94:26:e9:a2:
b2:d8:4e:7f:9b:ca:08:3d:02:a1:2e:f4:45:65:dc:9f:74:29:
68:05:ae:e6:0d:8a:00:13:38:e3:b2:21:68:24:dd:eb:2c:6f:
da:78:25:e4:29:da:10:c0:4e:c3:1b:bd:d4:85:ce:32:09:29:
e2:48:27:8c:92:46:d5:70:cc:45:86:b4:b9:ed:a3:0c:c3:5b:
db:46:1c:ce:ce:8a:ed:0a:b2:cf:80:4b:eb:93:a4:f3:1f:4b:
78:3a:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:32 2025 by rpki-client