Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: dNRvtKUi14rP6W3F8moFYLZlMdwHEimST1j2jyZh0mo=
Subject key identifier: 2B:B8:48:F4:D2:F6:B4:BC:36:A3:23:6C:24:7E:D8:45:06:7B:98:E9
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 0194BBCE0ACCBA0B35ED3700B6519FA99B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 1245
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: HhSvc0MbLLyIXHFQ0d11G7ZuZPYcvkLTTNL7KQb6iTg=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0a:cc:ba:0b:35:ed:37:00:b6:51:9f:a9:9b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=2bb848f4d2f6b4bc36a3236c247ed845067b98e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:ad:19:3e:64:45:50:ec:b1:52:0d:30:a5:
d8:a0:b0:cc:e5:0e:b4:6a:fa:6f:88:d0:95:f3:b4:
9f:5a:c5:68:c5:16:7c:ec:1f:88:cb:73:bf:0f:17:
e9:cb:b3:78:d0:10:da:77:ef:a0:21:e2:54:00:42:
ea:a6:0e:56:62:c1:68:7a:55:98:c2:d0:26:31:a9:
24:4f:f8:78:88:3a:a9:fd:de:cc:af:d4:fb:ed:55:
dc:81:b6:64:1b:5b:05:2a:e1:32:26:19:d4:b0:e2:
1b:3f:0a:b7:0c:1c:0b:ff:d4:56:5f:24:5c:59:28:
84:21:b4:b8:03:99:0b:ff:f1:30:4d:6d:27:4f:0c:
b5:9a:cd:ae:64:04:82:db:5a:a2:3c:a8:76:21:ff:
0a:89:57:86:ba:06:60:29:69:0e:34:87:59:ad:35:
e9:23:3a:ef:72:ee:dc:10:72:64:87:df:76:3b:0f:
3f:45:8a:1e:d6:f1:4e:6b:60:e1:01:83:10:ed:04:
70:79:13:32:6a:0d:54:15:e0:79:6b:96:d5:71:ab:
a3:fc:d8:e8:6c:52:fe:5f:86:d1:ff:ea:ba:d7:31:
1c:73:c5:7a:0d:e9:56:cf:e7:09:66:f3:49:3c:cd:
19:cb:0a:37:fb:0c:8c:23:e2:f3:80:87:bb:35:74:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:48:F4:D2:F6:B4:BC:36:A3:23:6C:24:7E:D8:45:06:7B:98:E9
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:06:46:4d:91:b8:9a:18:e9:ec:bc:15:f0:a9:d5:ec:67:5c:
6b:0d:f9:7e:11:1d:8b:ce:ce:20:74:35:f8:b7:fb:56:5d:9d:
20:9d:fd:ea:f9:92:26:3d:c0:bc:b0:d2:d3:57:5a:ba:a2:05:
86:d5:07:1e:06:f1:02:11:d1:2e:11:b3:f4:f7:6c:da:b7:43:
0d:32:65:51:49:b8:db:49:99:f2:22:5c:fb:20:38:25:ba:9b:
c3:76:ad:30:b3:52:f0:35:04:69:db:23:da:02:1a:7b:35:50:
a4:d4:45:b8:f0:d6:4c:5f:c4:0d:3c:31:8a:5d:70:1e:fe:b6:
1f:53:ce:96:84:65:fb:73:4d:b6:ab:c0:f4:a3:b4:19:06:79:
1d:f2:4a:96:b5:50:05:c8:6b:52:91:03:53:31:07:9c:be:b1:
cc:7c:55:47:c6:76:75:30:4e:dc:d6:ac:fb:ad:71:36:a5:90:
5a:af:64:69:c8:4a:9c:a1:7c:af:c7:7e:24:85:50:59:22:70:
53:4b:b3:34:84:8b:ef:d6:25:52:27:75:c4:a9:10:d5:bf:60:
a4:91:e6:5a:8f:f1:b3:cf:20:ee:af:ef:58:29:db:db:d7:26:
ad:40:25:21:a9:76:91:f6:b3:36:db:5a:c8:63:ce:57:0c:23:
ca:ce:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:10 2025 by rpki-client