Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: eKTmedJHrURXJRZwvPkLg/fsuHhyfEo3Y2GWiStVIn8=
Subject key identifier: 87:F9:15:F6:48:21:92:29:61:9A:4F:9D:F4:AC:57:9E:8F:C7:CD:08
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 0194BCAA1C3C21A482B62E18D5AE94E8B681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: WQXeHNYxxRr5z1iz1mwO0Kvs9gCrIGyTwZWXePKPBU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:3c:21:a4:82:b6:2e:18:d5:ae:94:e8:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=87f915f648219229619a4f9df4ac579e8fc7cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:1c:f4:fb:a2:d2:19:27:89:bb:65:58:0c:
ce:25:e8:98:82:a0:91:aa:10:6f:ca:bd:62:b8:69:
9a:6e:92:c6:66:52:c6:74:a9:71:c5:a9:ff:00:f8:
31:4d:63:ca:dd:c8:13:3f:84:e6:91:7d:c2:bc:59:
4c:72:7a:da:5a:17:31:21:17:d9:be:27:9e:12:b7:
3e:e6:22:b7:2d:a4:92:16:be:92:fb:a4:03:83:89:
d0:88:03:ad:2a:77:b9:e9:23:73:d1:01:dc:6f:04:
14:01:9c:93:0e:47:3e:1a:bd:67:58:01:ab:a8:69:
2f:b1:c6:ff:f2:1b:1a:7b:1c:4e:60:38:c6:4c:98:
3b:88:52:07:c6:cb:6d:dd:8a:fa:54:6d:48:3f:89:
53:3c:cd:0e:72:23:9e:20:3c:4a:1c:94:7a:d8:7c:
92:b4:7c:5c:91:38:4e:74:60:30:95:36:8a:5a:25:
f9:3c:e5:8d:90:c0:1b:f5:d9:27:09:a3:aa:d3:13:
c8:5f:5c:0c:c8:48:65:ba:e2:ac:78:4d:6f:37:b2:
63:0c:df:b2:39:60:2b:f0:0e:24:85:6f:5a:62:e9:
9b:58:5c:90:ca:af:ea:d2:7c:54:4d:75:26:d9:92:
f5:72:1e:93:7b:0f:64:de:a5:e3:8d:40:88:7b:d4:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:15:F6:48:21:92:29:61:9A:4F:9D:F4:AC:57:9E:8F:C7:CD:08
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0e:9c:b6:00:7c:31:01:79:f9:09:fc:a6:fa:4e:d0:66:8f:
4e:d3:e2:8a:7c:27:5a:d8:b7:4a:47:40:ce:0d:28:bc:ac:02:
1d:03:e1:6a:56:c8:08:a0:bb:a9:ab:05:35:22:21:90:24:1a:
37:c8:a3:bb:5b:97:71:85:8b:81:f1:e3:f2:0c:be:e1:26:72:
81:00:8a:c6:ea:c8:f1:c3:08:b1:ee:85:8a:91:b2:ce:76:38:
e1:85:ab:d6:85:c6:1f:72:f2:00:9e:5f:41:38:72:40:6a:42:
f3:86:cd:56:40:bd:9b:1d:8e:d8:46:39:90:df:8a:f0:4a:07:
a0:94:8e:b3:b9:89:a7:a1:d1:82:ef:0b:4d:22:87:62:b0:78:
20:45:a3:f0:6d:67:b7:04:95:51:5a:e9:78:4d:96:64:32:a5:
cc:8e:53:ea:be:fe:0a:ac:10:27:05:72:15:a6:ad:f7:04:8d:
3a:9d:47:79:b4:ac:1b:2a:70:b2:d2:0f:78:2f:ca:2d:40:92:
b0:e3:2c:d6:1a:91:76:8e:74:8f:5a:f9:b7:03:03:29:53:0c:
5e:5a:e5:de:7a:3b:c7:1e:3e:1d:57:6b:00:ac:ca:89:cf:d7:
64:f2:7b:10:85:78:81:9e:2a:e0:d4:bb:f8:bf:50:2b:f4:d8:
fe:fe:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:05 2025 by rpki-client