Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
File: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft (raw, json)
Hash identifier: 0UNlHlaELUsadIR7fr1cv6Ur9E5BuNjS6hYJ41snapI=
Subject key identifier: 64:39:81:D3:70:98:91:64:88:43:A2:F2:70:F7:5B:0A:BC:8C:EE:AB
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Certificate issuer: /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial: 0194BD4EBDF0D170FAF67F6209D0060DCF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
Manifest number: 0E83
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl (hash: 47mNYQ8B4b3rJpM1rve/TujmM/hTD/fu5EGqWfujAYU=)
2: Ice-tIEUF1Y7bJNvkEWlbR55Vaw.roa (hash: MtUFbwOo7nZHN6qSqL8LtBj2Ae2yCW5yZnsbKZTHysw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bd:f0:d1:70:fa:f6:7f:62:09:d0:06:0d:cf:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=643981d3709891648843a2f270f75b0abc8ceeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:26:79:14:67:d0:73:04:7c:36:e9:21:fb:
45:51:c6:7a:ed:7d:48:e4:8a:c9:2a:65:b2:87:c8:
bb:69:60:96:a1:86:f8:cb:a7:47:dd:66:3f:6b:4e:
10:8a:30:77:2a:c7:0c:4a:e8:f2:7d:38:cd:fc:0c:
3d:4f:51:d6:cd:9c:21:ad:dc:da:7c:e0:e5:bb:02:
5c:9d:5e:09:46:32:7c:3b:e4:ac:ca:91:b5:04:4d:
71:42:a9:17:cf:ab:81:9d:71:cf:24:d8:5a:37:8d:
d6:3b:3d:8f:29:31:b4:e7:c5:2d:4f:52:a9:2e:6f:
c5:db:8f:b6:2b:20:87:da:ad:8f:06:7a:c4:99:04:
52:1c:97:da:64:26:34:dd:a6:e9:fe:85:59:ef:dd:
ee:15:de:31:f7:d1:3e:26:bc:af:48:41:93:26:9c:
7d:a7:78:a2:dc:c8:c7:1c:bd:c5:ed:db:ea:26:f5:
be:41:77:8b:a2:68:0b:24:f5:03:11:ed:b9:18:ed:
8e:2f:2e:67:77:9a:ca:a9:3c:ff:a5:09:82:ce:09:
94:ac:ce:dc:dc:09:62:5c:e8:54:6b:13:7d:75:14:
2d:3d:86:f4:66:0c:78:22:24:7a:31:81:95:44:ac:
7c:fd:1f:2b:29:c0:2c:7f:b1:1f:f8:9a:a3:d1:8f:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:39:81:D3:70:98:91:64:88:43:A2:F2:70:F7:5B:0A:BC:8C:EE:AB
X509v3 Authority Key Identifier:
keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:56:f5:95:65:09:23:81:35:80:ce:1c:6d:a7:a4:45:02:44:
1b:fe:0e:84:57:79:27:5c:b7:fa:c9:85:b5:42:cc:ff:73:56:
ea:21:36:81:f2:40:6c:ff:7e:89:f5:ec:79:0a:03:e1:5b:df:
bb:db:c6:fe:33:d6:71:6b:ad:99:d7:49:75:30:1a:0e:81:be:
fd:36:9b:ef:c4:c6:36:46:fd:6d:ba:ee:2d:fb:fd:30:bb:ed:
34:63:75:18:b1:76:ab:3e:94:5f:5d:14:30:63:1e:23:15:30:
5e:e5:7d:b5:b8:75:84:cc:1f:6e:de:c0:e8:61:8c:e7:58:4a:
a3:d0:61:af:2b:88:f5:72:ac:a8:83:a4:65:b4:2b:d3:b6:83:
ce:d5:4f:e6:e4:3a:01:46:2b:1c:c8:3a:e8:a3:45:75:0a:b6:
46:28:02:72:44:ea:d6:87:df:05:2d:04:75:c8:d5:29:46:4c:
4b:07:b8:a2:12:2c:60:56:e4:93:ed:fe:3c:c5:05:cd:a8:2d:
64:d2:c5:1f:7f:e9:42:a9:52:86:a6:ee:3c:54:84:d2:39:ba:
cc:ab:7b:f0:8d:a8:6c:85:70:3c:10:60:32:92:59:5c:83:67:
bb:7f:ea:e1:85:3c:3f:e8:12:d7:dd:c0:98:9f:70:cd:a1:c7:
f1:22:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:03 2025 by rpki-client