Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: iFH8NwYKFqB0toMkTAa9C/FoRpivkYzIsMmLlkxae1k=
Subject key identifier: 45:CE:4E:5A:F8:FA:68:28:8A:A6:1A:23:2F:53:AC:9E:00:23:2E:29
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 0194BCA96A9DF59FB74A29A644AB12C18020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: lfkng2dLnpTFxFxP4SRJ/NE69fGze1lD11OeEK9APDs=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6a:9d:f5:9f:b7:4a:29:a6:44:ab:12:c1:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=45ce4e5af8fa68288aa61a232f53ac9e00232e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:9e:b8:95:34:54:08:45:75:e8:8c:18:d0:
28:e9:d2:cc:0a:a0:59:11:64:af:c2:69:89:86:1c:
b4:b8:b7:e3:7d:49:da:1f:4d:ab:26:18:05:72:29:
e7:09:d1:ec:a7:a5:4c:2a:4a:6e:9c:c6:f6:87:0d:
34:04:ac:0c:8e:73:63:de:b7:e6:09:ea:9e:e7:73:
29:82:12:f2:3c:03:bc:13:7f:70:1a:05:8c:e4:3c:
b4:16:93:4d:18:e7:74:36:cd:f6:9a:5d:d2:b7:d6:
d6:87:20:53:a8:6c:89:0d:0c:cc:4b:bb:4b:0b:d4:
91:ad:d9:7e:86:05:94:3d:19:d9:dd:1a:d6:8d:fa:
ec:f4:11:a8:e7:6d:2b:76:49:e4:9a:61:b9:6a:c5:
08:39:48:44:79:65:a5:e1:6b:90:d0:c2:c6:15:7f:
f9:f2:47:48:e0:2c:98:98:39:bd:64:f7:3f:9d:a4:
37:86:b6:b1:be:d3:3b:72:c9:36:ea:c5:c6:ed:14:
1f:09:47:92:54:44:72:a3:24:3b:58:d5:ee:b4:cf:
c2:e1:89:2b:1c:9e:36:1b:43:93:4c:6d:42:b8:a8:
b2:45:7b:12:91:84:18:ee:a6:ec:32:6f:81:46:0f:
de:60:cb:b4:fb:a2:9b:6a:f1:ef:6d:69:4a:0c:7d:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:4E:5A:F8:FA:68:28:8A:A6:1A:23:2F:53:AC:9E:00:23:2E:29
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c6:03:08:c3:da:51:66:00:6b:5f:b2:ba:2e:b5:08:e0:28:
40:46:20:bf:a0:01:05:42:a9:de:3d:b6:fa:2e:bc:c7:90:f9:
82:19:ad:23:83:48:89:05:94:1a:44:e0:a2:27:fc:94:27:00:
f3:f7:26:28:3a:b6:d8:91:14:43:28:3c:f0:5c:a4:66:a1:ae:
77:37:a2:64:43:fb:89:9c:a1:df:7e:a4:93:70:b3:21:86:fe:
f8:6e:24:9b:98:be:8b:ee:76:aa:62:63:62:75:84:ee:3f:9a:
b3:80:bc:54:ae:73:c1:28:d8:a6:03:ba:ed:34:bd:90:b2:63:
6c:78:a6:ea:c5:65:df:c0:a9:4a:aa:d4:f8:db:89:89:0f:99:
d4:40:b8:10:ba:ae:df:3d:4e:c0:c9:1a:8f:db:4a:39:d5:c9:
76:5d:fd:09:f9:16:27:e4:b8:42:8a:d4:fe:af:9a:81:f6:a3:
b1:e0:b7:a8:57:f2:c2:b2:4e:93:62:27:c8:4a:d8:8d:a9:a3:
08:df:ae:1f:8e:c6:56:07:28:bc:1d:e6:b0:48:30:87:cf:9b:
7b:93:e7:0e:33:db:50:d6:97:3b:36:ae:15:2e:a9:3d:f9:8e:
55:41:48:d4:26:90:89:83:e7:6b:96:7a:ba:ca:9d:2a:2a:e2:
02:dc:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:21 2025 by rpki-client