Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: TyuXq3lOVi+cOxWBYEFsdN4k/CcrqDt5UtjuHq/BiAY=
Subject key identifier: 1A:C1:17:D6:D3:06:92:C6:8D:C5:4D:5B:62:95:7D:26:39:FA:81:AD
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 0194BC72E2CE02B99B2AA9D4FF6D5CF4D065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 0E47
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: feXXUIQZi0Fy1dI9Iup0IdTw+j6MJuGT5jPuagjMAwM=)
2: 5VOe4OYzzKTEUENK2qpP4dw1rHM.roa (hash: yklM+8+QIVgxqJFRG7PIjsPzJR9m2DNglBvEbvNzHQI=)
3: fZfevjulHSUQq3s5yWFv674TKWU.roa (hash: vf320BzAd94TsSHPIP51253x2PDIPLIwS/GKSnpY5mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:ce:02:b9:9b:2a:a9:d4:ff:6d:5c:f4:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=1ac117d6d30692c68dc54d5b62957d2639fa81ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:b2:3b:3f:15:ce:87:7d:49:cf:a3:f1:c6:
50:34:a3:2d:79:06:8e:da:70:fb:52:32:7e:8b:18:
84:b4:4c:1c:27:f3:18:e6:e8:9d:f0:93:61:a9:5d:
d0:dc:a5:fa:6d:10:6c:e5:ea:fb:62:d3:71:cf:9c:
61:1e:2e:d4:e9:aa:db:c2:26:f3:f4:cf:33:d9:3f:
0c:6c:e6:8f:ef:df:66:a0:1c:0c:d7:73:2d:28:7a:
16:8d:68:35:a6:e1:0a:25:46:01:e3:05:4c:48:34:
e8:1d:d3:56:04:1d:41:67:92:78:b0:36:bc:b7:88:
57:94:33:be:18:20:42:d1:b7:9b:58:8c:e5:c2:04:
af:02:ec:a2:12:64:c3:b9:23:be:e9:f2:6d:20:b5:
d0:2b:33:22:c8:e2:17:c3:e6:f6:35:00:a8:2c:0c:
7b:89:1b:20:4c:79:5b:1d:2d:0f:a1:52:7c:4b:f8:
48:0f:c9:9d:45:54:3b:b7:23:f2:9f:24:2b:78:b4:
95:a6:0e:00:a6:14:91:56:3a:0c:26:95:fd:df:9a:
d6:c3:8b:d8:19:0d:86:a6:ca:78:d7:0b:69:f9:59:
f3:19:a6:8d:f4:eb:c7:59:88:62:a9:2f:b1:0b:51:
7a:50:56:df:20:9b:84:59:65:27:1e:8e:40:69:b4:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:17:D6:D3:06:92:C6:8D:C5:4D:5B:62:95:7D:26:39:FA:81:AD
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:89:77:bd:3d:88:b6:a5:fb:4f:5c:db:2f:bc:aa:76:0a:
28:32:eb:e0:5d:ca:f3:ce:f3:2d:28:38:f8:e7:9d:94:ad:e2:
fa:d8:07:fb:50:69:94:33:8e:d9:aa:99:2d:19:c3:be:8f:d5:
ee:56:fe:e2:2e:32:99:9d:e1:b8:a2:d6:37:05:15:6a:10:6e:
e7:8e:08:b6:07:8b:bb:b7:2e:2c:9f:ca:99:17:8f:23:20:c1:
7b:c7:a6:d5:99:81:4b:20:71:6d:e2:6a:1f:ce:a4:a1:98:1c:
c2:74:eb:bb:38:c1:81:e8:32:57:83:a8:5d:9a:99:29:4e:03:
12:b4:58:a3:81:c9:b3:10:ad:bf:26:b6:a0:35:b5:4d:b0:94:
ca:aa:fe:d4:41:c9:b3:80:5f:ca:14:95:81:77:77:9f:ad:33:
3d:f6:9f:99:74:d7:65:75:da:99:a4:62:16:b2:50:3d:e1:de:
ed:13:c1:bb:c2:69:13:63:dd:a8:5a:2b:be:06:1e:02:3e:8f:
cd:a5:80:7c:bb:38:01:88:4b:62:0c:4c:05:fe:e5:00:ba:84:
8f:48:1a:dd:28:72:65:7e:bf:07:59:e2:be:bc:8b:38:4d:18:
f6:b6:32:b9:63:77:b0:8e:26:30:49:f7:d4:aa:ea:02:8e:1a:
84:70:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:24 2025 by rpki-client