Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: t+B0B+1RnXb4qbkOlovqB82090bEhJZqNYr3vBMUIgU=
Subject key identifier: 56:17:8C:B2:CB:8B:30:FF:65:EE:78:E3:14:DA:1B:51:EA:54:76:60
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0194BC04EEC460C9CBF6CFE44BD9E5ED14F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: b6O3VoLb57JWR5mubpKg0xRhebJIr+bRYVnoEsv1fLc=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:c4:60:c9:cb:f6:cf:e4:4b:d9:e5:ed:14:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=56178cb2cb8b30ff65ee78e314da1b51ea547660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:80:7e:12:ba:75:f5:0a:a9:1b:67:95:5c:
7d:1b:96:8d:1f:52:af:9e:6f:d8:97:59:9a:2b:4c:
67:b5:8b:75:9f:e5:b5:9c:99:0b:9a:04:47:3d:e3:
9a:48:f1:a2:ee:28:2e:15:5d:d0:4d:a5:56:43:24:
29:15:7a:f6:bb:60:d5:49:78:9f:a2:ed:0c:fd:4f:
ee:cb:8c:ec:6f:06:57:ab:43:15:69:76:1f:a2:26:
c1:7f:e0:b7:6e:7d:91:a9:43:03:b8:6a:0c:bb:08:
22:ae:7f:4b:e3:a0:b6:60:76:32:3f:f2:9c:f7:f2:
f1:f4:69:43:7b:84:ac:df:58:84:de:3e:9d:67:bb:
4a:e5:0f:59:6c:5f:b4:31:6b:4b:0e:c0:86:06:fb:
80:88:b9:dd:38:f6:2c:74:d4:47:88:ed:07:f0:30:
e3:8d:74:8c:37:2f:fa:38:d5:b5:4c:75:4d:2a:7c:
bd:36:cc:87:f2:b7:e7:94:1a:0c:95:77:f7:fc:c3:
dc:38:11:4d:5a:81:5b:50:21:b9:7d:f7:e3:8d:92:
f8:f3:d8:fc:22:4f:e9:63:a7:10:ac:32:24:f6:07:
82:63:49:e9:c5:7b:a7:fe:47:ca:e0:6d:0d:4b:cb:
4a:f2:76:30:7a:88:e2:ca:66:fb:e5:c8:e0:b2:5c:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:8C:B2:CB:8B:30:FF:65:EE:78:E3:14:DA:1B:51:EA:54:76:60
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:10:c3:74:79:33:92:5a:ca:b0:69:41:07:fb:b3:ce:63:
a1:cc:f0:61:6d:50:e2:cd:5c:81:d8:1c:b8:db:9f:e1:18:2a:
9e:22:2f:fe:62:44:9d:3c:7f:8e:9f:4f:97:8d:88:1c:ac:77:
e8:04:55:cb:88:5a:5a:37:d5:8f:98:71:a2:af:88:ec:38:46:
bd:a4:b9:23:8f:c9:d7:0a:f9:ec:d7:65:c6:44:48:bc:1b:7e:
e7:0f:0f:25:3b:88:5e:65:1c:56:04:50:e5:fb:f7:e2:2c:e8:
79:63:a5:8e:8a:ad:74:c1:5f:29:93:4e:89:fa:1d:5a:45:1a:
05:88:17:94:3c:3d:e8:b1:56:40:2e:a7:ed:e7:74:cf:77:50:
83:f8:f0:7a:3c:8f:0c:0d:22:23:e3:2c:5f:16:9d:72:14:a7:
f7:32:23:ee:9e:76:83:8d:b8:97:7e:39:db:84:55:cf:2a:3c:
58:f9:dd:f6:7c:d5:8e:0b:32:f9:9e:29:0d:e8:08:dd:fb:2c:
d4:03:dd:ce:8c:80:17:04:66:ad:97:2a:24:2e:de:52:b0:9d:
d4:6b:67:92:ef:07:17:82:b9:b8:b3:c8:88:63:52:26:10:52:
7f:be:f8:31:12:70:59:78:89:81:b9:5a:31:0f:1b:48:bf:f4:
14:eb:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client