Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: Rgt8iunJcMmVqV4KKMqDoPpfieErOJqgSDLu2BayIAg=
Subject key identifier: 68:9D:9C:43:DC:0D:5E:F8:2F:7B:CE:24:5A:77:29:C6:5D:B2:82:A8
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 0194BD4EC5FF2BC74EF529502810A559061C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0B13
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: vyRPpY/JCoLBHqCs5Sse9gpymoG3jreOX0G2J/6Knes=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c5:ff:2b:c7:4e:f5:29:50:28:10:a5:59:06:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=689d9c43dc0d5ef82f7bce245a7729c65db282a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:8d:06:5c:95:57:5a:9b:7a:23:3a:b4:69:
16:ad:87:24:c3:54:60:55:0f:9c:e0:d4:02:a3:41:
e4:ee:3f:8d:21:fa:53:a6:39:4f:cd:ca:65:ca:ea:
27:dd:c1:43:c0:35:ef:5d:54:7a:6a:ac:3b:22:30:
fc:7b:0d:57:18:e1:4a:38:39:f0:29:e4:97:6e:aa:
af:aa:1d:24:43:80:0d:8d:dd:e2:2b:53:98:db:88:
bf:9c:c1:a9:0d:11:c8:9f:ab:32:d8:04:8c:80:47:
e9:99:23:cd:ba:4a:a5:a8:76:86:5b:aa:0f:25:a1:
d3:8a:52:4e:8a:89:40:ba:b4:d2:2c:51:a7:0d:fe:
4e:30:40:27:fa:52:3c:f1:79:b2:3d:96:85:38:33:
33:35:4e:0d:96:4c:58:c4:d2:8b:82:a9:45:65:fc:
3d:6b:db:94:fa:f1:13:73:2b:c2:18:ed:b7:45:d3:
cf:9c:bf:6c:f7:32:dd:33:ff:08:63:f5:c0:21:e1:
b5:a8:82:b2:83:5d:fe:d9:17:d8:49:98:1e:72:df:
ef:d6:5c:a5:54:e3:bd:c6:25:4e:a5:f4:b7:cf:a3:
33:9a:a3:22:25:72:41:cc:d3:8b:29:f5:c5:17:71:
31:98:45:67:1f:41:0b:56:c7:bd:20:a9:57:79:50:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:9C:43:DC:0D:5E:F8:2F:7B:CE:24:5A:77:29:C6:5D:B2:82:A8
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:7b:56:7c:f6:63:80:fa:16:f7:4a:04:38:e2:0f:88:7b:
d5:78:bf:ff:0a:12:43:0e:ca:0c:e4:a4:1b:3a:07:ef:f4:ff:
4f:04:11:2e:76:b0:a7:b9:c4:a2:a8:3f:cf:65:cd:fc:b7:91:
60:1c:fb:25:5e:95:0e:21:c0:f1:75:80:bd:c9:c9:c9:c0:c5:
54:c9:69:49:fa:a2:a8:5b:66:fe:75:87:8d:f8:2b:22:c5:f7:
db:18:1f:81:f8:51:fa:63:b3:63:41:16:c8:9f:09:be:30:2b:
5b:06:47:f5:d0:32:26:64:5c:ea:91:50:97:ea:33:f8:10:bb:
61:ac:f0:c9:cb:b2:44:66:9c:81:8b:b9:38:47:91:a8:ad:53:
ae:0f:81:82:a7:02:d9:9f:45:b1:d9:34:5d:31:0f:83:0c:35:
f6:8e:b5:91:d3:58:6d:56:84:38:7d:5f:07:74:9b:3e:3b:ba:
67:fe:9b:4c:a0:c4:e0:6d:d4:96:fe:51:67:0d:5f:fb:97:34:
65:5a:8d:1e:e1:45:af:41:c6:30:f2:e3:9d:ef:2c:0e:a5:14:
07:ad:23:19:97:cc:3a:3f:10:04:63:67:16:51:e2:c6:6c:62:
4c:1d:90:12:1d:07:45:c3:3a:2d:5d:59:34:8a:78:a0:53:b7:
ab:2b:92:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client