Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File: _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier: H8Qw/oBtrWUNyEFSl4ceqfYsTmXukVNxzt7g+mWXbk0=
Subject key identifier: 7A:7B:79:27:CC:5D:74:66:2E:ED:7B:5C:45:88:F0:56:80:78:D4:8F
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer: /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial: 0194BCAA37CB1ED378B56A62264F4454562D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number: 1F
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: 4YErc5ecXFaB0GybmHmMLOOf4L+WrG2etPsrn5v2Dk8=)
2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:cb:1e:d3:78:b5:6a:62:26:4f:44:54:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=7a7b7927cc5d74662eed7b5c4588f0568078d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:90:f3:59:02:bb:c1:c6:6c:c1:ca:17:1b:
7e:c0:0c:4b:04:47:59:e1:0e:ea:e8:a3:d2:69:88:
aa:10:8b:bf:e2:01:16:4a:75:80:9b:54:5b:a7:0e:
d4:80:ac:ec:da:f5:ba:c6:26:48:eb:9b:32:ca:e8:
85:94:8a:78:22:a3:10:60:43:aa:33:49:8b:72:d9:
23:fa:96:76:e8:1a:87:65:30:3b:e9:03:5c:90:a1:
b3:7b:3d:15:f9:50:f3:2e:cf:13:8f:c9:77:e8:cc:
a0:8d:3d:37:23:5c:f1:95:0e:4d:44:d3:57:05:5f:
06:f5:f1:61:56:28:87:81:98:37:f4:42:94:75:f4:
8f:a8:aa:b9:00:e4:b6:f1:91:93:cb:6e:6c:96:ac:
35:11:08:77:e3:ac:34:af:fe:02:04:3e:b0:3b:08:
cd:ef:6e:a2:eb:13:4d:69:40:a1:e1:72:37:a0:a6:
82:ea:b4:94:1e:b7:ea:7d:37:5d:7b:7b:a3:4d:92:
cc:dc:c9:b9:f2:1a:3d:aa:0a:92:17:6e:23:43:da:
31:da:17:c4:28:63:9b:81:55:7b:0d:d2:c0:94:e2:
8a:47:a3:b9:63:14:6b:61:ac:1a:77:2e:26:e7:9b:
da:1c:d8:39:e7:e8:24:54:af:5b:e9:4e:a5:b7:b1:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:79:27:CC:5D:74:66:2E:ED:7B:5C:45:88:F0:56:80:78:D4:8F
X509v3 Authority Key Identifier:
keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:b0:27:4e:b1:e7:bb:62:48:51:75:29:97:bc:bd:1a:5f:
e9:6e:c1:4d:5e:75:eb:1e:c2:d8:e9:2e:3e:f0:7c:d8:83:fc:
8f:c8:3d:f1:a9:20:0c:95:e8:1d:69:61:af:e3:07:06:dc:2e:
26:c0:d8:ae:fe:e8:50:30:0d:72:83:18:fc:95:72:2f:e2:77:
9f:20:74:da:b0:58:5c:ca:45:08:ee:af:5f:7e:e1:42:fa:9c:
cc:05:a9:a3:84:79:e3:29:6a:56:e2:4b:7d:b6:05:04:ec:84:
db:f9:0a:1a:28:ab:23:1c:e2:a3:3d:cb:65:85:7b:08:1d:93:
7f:c1:0e:b9:ba:be:47:c3:6d:6a:2a:6f:03:3b:32:ec:50:44:
f4:9d:6a:93:64:36:48:f5:f6:33:ba:42:c0:ac:3b:22:3d:63:
58:b6:e0:c7:39:cf:7a:57:12:46:d2:99:dd:ed:ef:aa:56:b7:
4b:96:35:7c:ec:8e:c5:15:1c:ed:e1:6e:e4:a2:8a:32:1d:99:
1a:fc:c1:08:9b:b9:ed:c3:6e:be:1c:1c:3a:ff:15:83:27:1d:
8d:97:61:ef:8c:60:e5:6a:29:45:b2:44:4e:00:9f:eb:db:37:
67:b9:be:31:57:09:76:f5:29:03:1a:1a:da:80:ce:41:93:d6:
d4:c3:ef:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:04 2025 by rpki-client