Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
File: inFQB06m_dHoTdleCwaDZAfpQRs.mft (raw, json)
Hash identifier: 1RSVO4/zzazeDanun0Xm4ucH+HEYMQGH1zAxLfdYbKM=
Subject key identifier: 70:8E:FD:D5:B7:34:D8:C1:BC:74:79:3A:D8:88:D6:DE:BC:EF:54:ED
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 0194BBCDBB807851A917360B25287C5B1096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: Pi02KG0PU_FlnsHmqgd5zbKLVdA.roa (hash: rz8wrfdxxW9MCDam/a85dhszclSCd3rA7daMzdL/WN0=)
2: inFQB06m_dHoTdleCwaDZAfpQRs.crl (hash: lWF0O2mRuV5SyL1QQ41lwdh08cRsTttmlyHXtzhJcaE=)
3: swlD7NexiqeUhjpippjXSrPfBRU.roa (hash: a8BMuK2ewbTVEG8qjtK3NV+IeXc5gmKfF4oUMOgajuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bb:80:78:51:a9:17:36:0b:25:28:7c:5b:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=708efdd5b734d8c1bc74793ad888d6debcef54ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:d0:93:12:f2:32:57:17:61:27:fa:a0:d1:
f6:fd:e6:cf:9e:81:78:bc:b2:6b:7f:45:a5:e2:13:
61:70:5e:08:27:49:8d:ec:39:71:97:ab:2e:ff:b4:
5c:b5:bd:f3:f9:7f:0b:4e:3f:90:e8:35:93:bb:77:
24:84:1e:87:ca:52:de:38:e9:cf:07:be:65:8f:c4:
a8:7b:ac:d6:f3:1a:e6:8d:81:f5:ec:d2:43:44:95:
95:6f:db:57:3f:35:3b:d3:5d:af:c2:67:78:3c:42:
7b:b5:7b:a0:6d:1c:e5:68:25:1b:41:41:1e:e0:a3:
3a:18:c3:37:79:67:a5:f9:89:f1:4c:fe:e6:12:40:
d0:4c:f3:f0:b4:73:6a:9e:f3:04:88:8e:0e:c0:10:
ba:9a:69:ed:18:7d:f8:63:ae:fb:cb:81:9c:d6:1c:
63:b0:f4:75:cd:30:18:f0:a8:a5:e3:cd:21:08:19:
a5:33:dd:c1:de:95:ef:a6:18:44:83:18:7b:f3:21:
60:ce:0e:4e:ec:b3:00:f7:f9:15:3f:8b:68:fa:db:
ea:5f:98:c0:ee:58:78:97:ef:66:d2:06:44:e1:4f:
28:52:c1:f0:7f:8f:34:44:fa:af:56:63:bc:6f:6b:
60:6b:92:15:23:44:8b:0f:c1:6b:2d:0d:c0:97:3b:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8E:FD:D5:B7:34:D8:C1:BC:74:79:3A:D8:88:D6:DE:BC:EF:54:ED
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:0b:ff:bc:85:4a:41:80:c9:7a:9a:ba:ed:2c:a3:dd:da:
c2:cb:9f:37:40:fa:7b:16:d2:60:6d:70:57:5a:28:dc:4f:75:
7c:f4:b6:cc:d4:34:b6:5f:ad:63:b8:bb:e5:9c:07:97:7a:91:
0a:0f:23:5e:b4:06:6e:5d:34:9d:c4:72:e2:d7:62:6b:7c:d4:
4e:06:a5:38:fd:59:e5:32:b9:20:88:1e:f4:88:27:94:a7:f4:
bb:4f:2a:fb:68:77:33:ab:f9:84:f3:d4:31:59:8a:5a:2b:3e:
54:c9:99:2c:de:0b:1d:cc:21:49:f2:1a:de:29:74:9c:f4:f5:
6b:05:c7:0e:d2:dc:06:99:af:20:cc:a9:c9:81:18:da:14:e0:
f7:1b:67:fc:61:63:9b:67:c3:a3:b1:0b:ac:5b:ee:93:5d:08:
f4:b3:6f:d6:8a:db:e2:4e:2b:86:ec:38:6d:31:37:e1:24:51:
e4:49:ca:a3:00:7f:a4:6d:fd:67:55:0c:b8:b3:a0:64:d2:38:
da:68:94:4d:32:0d:46:fe:b0:26:56:94:c9:22:97:36:4e:9a:
d7:d3:e4:70:7b:77:62:d7:cc:41:61:12:b0:8c:54:f1:71:91:
84:3c:0f:88:d8:31:6f:04:d1:df:23:dc:22:b9:3e:ce:fb:6b:
13:49:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:34 2025 by rpki-client