Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: tPyyUqM9sFZwXcNmY1imasWMeUuHHZNVN+KZ6xfJxzU=
Subject key identifier: CE:A7:B3:76:17:E6:D7:C5:FF:41:15:5A:8D:C8:02:8E:8B:48:37:E1
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 0194BC04BF2C8BB16BA6FA6D9E46D6E8FF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0ACC
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: Ni+zU4GSN1LczSBdyk5/WKV+NO2oxOYIT92ZIRs9SU8=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:2c:8b:b1:6b:a6:fa:6d:9e:46:d6:e8:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=cea7b37617e6d7c5ff41155a8dc8028e8b4837e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:2e:44:c1:64:0c:8a:3e:fe:c8:64:60:10:
0c:0d:28:e7:d2:ae:ce:91:20:97:2d:fd:7e:a1:12:
d6:27:ce:ac:10:75:d6:85:54:54:db:28:01:1e:b3:
de:75:5b:31:b7:5c:9c:04:f0:5f:c8:f0:99:5f:dc:
6c:42:ad:8c:10:1e:14:ad:f8:80:c3:2e:4f:65:c0:
5f:00:ce:ef:22:84:c8:96:07:b0:e4:16:bd:37:26:
de:d9:6e:c7:69:04:d7:4a:55:bd:3f:db:fe:7b:28:
7f:80:45:7a:13:4d:55:7c:02:cc:e7:0f:54:25:d8:
ae:33:02:a5:7e:38:49:6c:ff:16:1a:ce:cb:6c:22:
99:3d:a2:65:5f:9f:76:e8:cb:48:3e:fc:f0:4d:ae:
5c:f5:74:4e:2f:2e:95:b7:65:6b:f4:03:a8:a5:50:
f7:52:df:2c:04:e4:da:b5:d3:be:2e:68:1c:c5:aa:
bf:f5:fc:9b:12:b8:6d:d9:66:d4:76:6d:b3:5f:c1:
d9:e6:49:bb:6b:27:02:f4:05:e9:46:17:07:28:d0:
90:39:7c:f0:3b:1c:fc:96:89:7f:f6:e5:01:91:18:
5f:41:a6:5d:af:7b:33:59:ec:a7:2f:95:2e:85:4b:
06:ea:28:40:0b:7a:7c:88:0d:e3:a3:26:3f:05:b5:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:B3:76:17:E6:D7:C5:FF:41:15:5A:8D:C8:02:8E:8B:48:37:E1
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cf:42:61:24:fb:3b:a6:b8:2e:b8:7b:78:f9:73:58:24:da:
37:81:33:d3:21:7a:49:48:91:3d:f3:af:66:85:68:48:bc:f0:
c1:9f:5c:be:45:2c:c1:84:dd:d2:e3:e5:33:e8:54:98:58:2b:
ff:0e:e7:70:50:40:2e:f8:8e:fc:99:ec:22:95:86:2b:88:d1:
96:3f:e4:53:4a:61:f9:21:cf:8b:eb:8a:de:5e:90:ca:53:b1:
db:6d:96:4c:05:7f:2d:be:37:0c:9d:30:8e:d6:be:b0:8c:70:
5d:bb:1e:a4:92:4a:c8:24:cc:83:49:e5:ff:0c:74:be:b4:ad:
e8:92:89:80:5b:a1:88:39:f0:e8:4b:e2:84:5c:e1:5e:34:a9:
86:c4:b5:5c:69:25:c1:07:6d:9b:4b:9a:24:92:29:80:b0:f6:
5e:77:22:1d:f6:0e:5a:d1:72:d9:f2:e3:bf:19:47:0e:a6:36:
fe:9e:58:e1:29:e2:59:a5:e4:26:33:ab:dd:16:2a:6e:4a:47:
51:f1:7a:31:a7:c7:ab:89:e0:dc:08:7a:cd:b5:22:ca:20:d0:
0d:70:d0:4e:aa:14:c3:6c:b3:b3:12:b6:b4:02:a7:6f:23:3f:
9d:53:87:83:54:5f:b5:26:96:51:f4:6c:ff:08:c9:09:c6:92:
97:e1:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:58 2025 by rpki-client