Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: mG7I8GTfIQtKMBsHgoWuopPQJhntIeXhVGG6tUEuFlc=
Subject key identifier: F6:BF:AF:CD:82:26:5B:1C:BF:85:36:8C:4D:8C:EA:52:F9:DB:45:19
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 0194BD854E35F4BD389E18F7DF17966F93E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0785
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: FMz/CrzIM55i2MbDLun2U7LOOWsi/UePoPbZhF8ci3w=)
2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:35:f4:bd:38:9e:18:f7:df:17:96:6f:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=f6bfafcd82265b1cbf85368c4d8cea52f9db4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:cf:76:b7:7f:78:bc:60:fc:c2:eb:50:4e:
46:7b:23:ab:fe:a7:52:bb:c8:37:99:1d:16:e6:b2:
d0:4d:a5:68:f2:1e:6b:9f:4f:a8:30:32:95:b6:18:
23:44:2f:a4:fb:e5:cb:e7:85:d1:23:fe:b2:86:f4:
ee:6f:15:47:ae:c0:a9:1d:1b:42:2c:72:79:54:75:
4e:81:ef:96:06:c9:6b:49:83:dc:80:1e:5b:05:50:
75:b9:5c:46:6b:8b:63:19:02:b9:55:c4:c8:22:63:
55:6d:7f:b3:84:9c:59:a6:54:74:3e:cd:6b:4d:a5:
42:da:26:1d:4b:95:03:11:92:57:af:4e:44:7c:23:
9e:d3:0c:8a:0b:fa:00:54:df:67:fc:a4:7b:00:ed:
08:b1:2a:bf:62:d2:cd:67:86:1c:ae:b2:42:76:9b:
d3:02:9a:d1:05:7b:51:cb:3c:f2:63:fc:0a:e7:40:
7d:e5:f4:99:0c:0f:5a:f5:60:6f:13:08:da:14:12:
49:e6:57:cb:07:e3:86:b0:75:15:80:81:3c:f3:59:
8a:7f:69:73:c1:d4:37:eb:2a:f6:d2:4f:69:fb:01:
15:37:27:d4:16:6d:1d:f3:ed:2e:d6:21:17:17:8f:
26:b7:ec:bf:82:c7:d6:89:50:19:e7:72:ed:90:a4:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BF:AF:CD:82:26:5B:1C:BF:85:36:8C:4D:8C:EA:52:F9:DB:45:19
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:de:15:2f:ac:05:ed:9a:6d:c9:89:55:77:c0:e0:26:86:
9a:91:be:a0:7e:b8:2d:c6:4a:47:a8:e8:17:68:db:86:90:f2:
46:a6:ac:33:d7:b4:48:0d:fb:c0:a5:f6:6d:56:ef:fd:2d:6c:
4e:77:94:47:fc:46:a0:ee:67:cc:c7:21:71:d4:a8:7e:bb:97:
80:17:f6:93:fe:53:86:b4:d5:e9:89:9a:fc:9b:78:e2:86:45:
37:35:5b:a9:9a:43:2c:9f:ee:ed:55:f3:03:55:64:fe:6c:49:
d8:87:7a:91:1e:d7:b7:3c:58:f0:5a:d4:b3:e2:bb:98:6d:11:
3b:d0:a8:e5:dd:3c:38:0c:91:ac:5e:52:e1:34:fe:3b:e3:aa:
61:72:21:95:bd:8a:11:ba:3b:97:cd:03:ce:b8:a5:7f:31:f2:
3f:39:ff:96:c1:66:c0:63:00:05:a5:95:cb:ab:55:91:4f:4f:
0a:35:f7:c2:60:11:90:05:a5:d9:b4:2d:f5:55:0d:4c:ec:99:
37:5d:11:a8:0d:64:1a:68:07:56:57:76:3e:06:56:ba:58:b2:
b8:71:bd:82:21:46:b0:17:2c:1a:14:27:e6:be:b0:44:bd:61:
72:c3:07:bf:a7:53:d6:4b:8f:47:93:2e:5f:9d:35:8a:67:91:
f0:25:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:27 2025 by rpki-client