Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: CXDRBa5VEowKgZ+7vK1Qvxuuw/+Rpx+sXEdXkTiXp74=
Subject key identifier: 66:D7:BA:56:A0:5F:DF:25:EE:7C:3E:0E:CC:E0:F6:A0:A0:84:D6:2A
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 0194BD4EBBB91F9D52124BEF1F22354AC0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: wcr/LN9lpqZAgfI1Kq26QcUQ2s9IkMdwaA1s7B6227g=)
2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:b9:1f:9d:52:12:4b:ef:1f:22:35:4a:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=66d7ba56a05fdf25ee7c3e0ecce0f6a0a084d62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:41:53:d4:b6:62:dc:f6:69:f7:45:99:1f:
b7:2c:30:3c:ba:f2:7f:24:47:7e:ab:4f:9b:a5:21:
48:18:ba:50:5e:3a:e7:23:02:6a:51:2d:b8:4e:5d:
8e:dd:87:3b:16:79:a8:c7:12:82:98:16:dd:09:0c:
7c:ee:3b:9a:76:7b:b8:39:8b:1c:4d:f8:8b:f2:2e:
a1:e2:11:d0:c0:12:c7:88:3e:3b:7a:e8:78:d4:19:
cb:9f:f2:59:d1:8d:07:a0:ee:44:7a:ca:6d:d5:0f:
f8:ca:2a:09:ad:34:8a:b6:31:86:f6:2e:2a:13:92:
f5:ea:18:3c:59:ff:5b:40:57:b8:b1:1a:34:d6:cb:
cb:31:cd:58:88:bf:45:0c:3f:52:f3:ef:8f:77:9d:
90:9a:1b:ed:46:52:c3:18:17:aa:1f:fe:d9:da:af:
f5:ff:91:82:a8:2c:ce:44:2d:1a:08:53:51:a5:9f:
71:39:52:62:3c:3b:ef:0a:7f:81:62:40:98:0a:8f:
94:3c:f4:69:2b:f4:f7:0e:85:76:9b:29:ed:78:74:
e5:b6:a8:40:5a:87:86:d1:cb:c7:58:37:2a:2a:6a:
5a:87:40:89:24:dd:1f:e0:18:35:72:dd:19:6f:93:
aa:78:f3:68:82:47:55:c0:55:50:07:b6:83:98:71:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D7:BA:56:A0:5F:DF:25:EE:7C:3E:0E:CC:E0:F6:A0:A0:84:D6:2A
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:52:12:6f:29:7d:96:d0:fc:51:5a:7f:97:3f:04:77:df:a2:
be:b4:c2:58:62:3a:e9:35:f2:d3:88:4d:8a:7a:10:cc:9a:33:
f1:df:24:2f:15:f3:d3:24:c5:5f:95:0d:50:d0:58:c0:31:36:
b7:2e:48:71:04:36:62:27:a1:06:a5:1d:b3:5c:ce:bb:aa:50:
c6:55:fd:c5:10:f6:6a:82:da:90:c5:51:c1:f8:6f:6c:d6:32:
b4:fd:c0:04:cc:28:4d:d5:e6:a1:eb:32:ad:c1:0d:a9:b1:b7:
5c:0a:f6:d6:93:f6:46:a9:d1:7f:c4:af:c7:14:d1:fa:86:5d:
c7:9e:30:aa:75:30:de:01:a4:10:75:c4:d3:ba:15:ff:0b:a8:
eb:69:73:49:46:78:69:4c:5b:3f:c4:a0:f8:d3:6c:81:c2:e1:
f8:00:90:5a:e6:77:f4:e8:e8:ed:db:e1:47:dd:4f:88:53:5d:
ae:69:88:20:cb:07:5e:e2:97:0f:93:2f:0b:5f:05:47:d2:83:
a8:82:da:58:1c:bd:d3:24:48:a5:49:5c:fd:45:19:cb:ff:69:
77:d0:a2:95:4a:4f:62:38:8b:fe:49:54:ab:cd:d4:78:32:7b:
6f:10:5a:76:d7:20:6e:01:ca:da:5a:a0:74:f0:be:5e:cc:75:
35:ab:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:24 2025 by rpki-client