Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: zS7wbRMB6pKIQAR1r0VxcBGykRzWr5pazLI9ZIHW2bE=
Subject key identifier: FB:DA:AD:B0:C4:D4:C8:E2:94:88:6C:AC:F4:63:C3:9A:75:41:DA:A6
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 0194BCE0CD9194BC8CAFE15627BDB15E4648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 10E0
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: azlM+ehWiffDK4gjzHv1X7xvu/myfvyH+teMuKujgEc=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:91:94:bc:8c:af:e1:56:27:bd:b1:5e:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=fbdaadb0c4d4c8e294886cacf463c39a7541daa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:b9:e4:bb:94:c3:3a:03:70:e6:da:ab:20:
9a:2e:d5:d3:24:ed:f3:77:ef:16:40:a5:8e:fe:56:
80:b4:38:c3:da:64:5b:e9:bb:3b:e6:c2:18:6a:85:
f3:1c:ed:c2:3c:a9:e6:a6:be:98:c1:0a:00:34:1a:
78:e3:20:a5:32:3b:6e:60:ee:fc:22:ba:91:aa:16:
50:75:e7:06:b3:ac:c0:2a:63:26:3c:f1:76:c3:29:
b6:f1:5c:0c:18:46:69:c6:6f:10:75:e1:7c:0a:6b:
63:ea:d8:55:56:77:ef:0d:0b:c5:bc:70:79:b5:3f:
22:20:1f:ec:81:93:8d:67:e5:cb:81:b8:dd:8b:80:
0d:ef:b6:db:e4:0f:4a:34:16:f1:20:8b:64:bb:34:
fd:de:af:0b:3f:ef:a2:c8:c0:86:c4:6d:b7:ed:43:
2e:90:b1:81:a6:56:98:70:d6:84:ee:d2:c2:0f:c8:
71:86:5a:f2:ef:1f:31:49:47:11:78:24:45:da:f0:
d4:eb:7c:59:f7:f2:5c:db:8a:aa:5d:3a:6f:bd:03:
a8:d0:27:61:c2:ce:0a:df:2a:23:7e:8c:c9:86:62:
64:a8:92:1a:32:75:64:7c:64:b9:a9:d0:62:9a:1d:
bf:92:17:b7:8f:50:4d:f0:18:45:2e:48:dc:29:4f:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:AD:B0:C4:D4:C8:E2:94:88:6C:AC:F4:63:C3:9A:75:41:DA:A6
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:51:a5:1b:0d:4b:eb:ea:bb:8b:29:4a:4c:5c:eb:cc:d8:c3:
ef:1d:64:38:8e:37:38:08:6e:c5:4c:a3:96:16:83:3e:b0:1c:
84:c4:72:86:9c:35:0a:ac:88:c0:30:df:c5:d7:9b:a8:41:ee:
55:5f:c0:14:76:c3:c7:b3:9b:e0:5d:13:c1:42:0b:7b:e5:a1:
03:b4:de:7e:46:00:6d:3d:03:31:08:cc:9b:76:0d:07:7d:20:
c0:1d:3c:58:06:b8:c8:15:dc:3c:c3:ef:9b:0b:28:ea:37:fb:
5b:d3:8b:70:3f:42:ef:23:31:c4:d9:08:2e:91:e3:1e:07:60:
e9:41:02:03:85:8b:f1:5c:83:68:c5:a8:e5:c4:78:d4:7a:cf:
74:74:34:9d:30:4e:f3:13:94:97:1a:ed:06:03:72:58:1e:2b:
7f:13:a4:a4:1f:0c:f6:cb:bf:3c:25:c5:98:cd:fc:fa:0c:4c:
96:fb:cf:e5:13:60:c2:e5:db:7b:99:85:07:8d:76:d9:88:0f:
f5:7e:d8:96:db:94:d8:d5:94:83:07:fb:51:17:15:42:ec:01:
d9:09:4b:c0:55:33:fb:54:b5:ef:1f:55:83:c3:3b:db:a2:00:
4f:a1:ad:3c:76:5d:da:3f:dd:4e:98:a0:f0:b5:5d:ef:20:1d:
48:34:f0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:49 2025 by rpki-client