Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: /j2ju/RfnDJrbepxUICFmrS34eHhConzlINf5aU4NAQ=
Subject key identifier: 22:08:3D:EA:D2:BA:11:3D:6D:91:F2:E6:D2:49:00:BC:9E:6F:F0:A6
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 0194BD174FE81F4DA65F9B64A0536D9A69F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0B9C
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: fHaytYIiD0nUnIitFNLeTZ0ZwEKFSiUYSdriY1Y/mzA=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4f:e8:1f:4d:a6:5f:9b:64:a0:53:6d:9a:69:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=22083dead2ba113d6d91f2e6d24900bc9e6ff0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:19:dc:c1:7c:a2:b3:4d:e1:a2:9d:99:71:
cb:77:9d:e2:50:3e:01:0f:6d:c9:a8:6e:46:7c:c1:
f5:f7:e3:01:6e:c3:ae:ab:7b:1f:f7:ad:29:fb:4a:
32:33:04:50:42:7a:02:f2:a8:1b:27:32:44:9a:7c:
68:a2:2f:61:25:bc:37:fa:94:c0:b5:8b:8e:56:9c:
34:1b:17:5a:be:c7:3e:11:36:aa:d7:f9:a4:dd:fb:
63:9c:dd:c5:a8:52:dc:c1:f8:bf:34:f6:e2:27:be:
61:20:3d:54:1b:14:ac:31:5d:c7:07:63:7e:1b:73:
0c:59:0c:45:f5:6f:e5:d2:d2:9c:43:4b:0b:8e:b2:
3d:22:6d:9f:ee:84:bd:d3:64:58:34:d5:c2:cf:fd:
fb:bf:da:6a:c7:be:8f:e8:44:a0:56:1c:d4:2f:85:
d1:be:9b:a5:2c:75:65:ee:c0:45:fd:51:e2:74:88:
86:54:fc:bf:5b:33:2a:87:29:49:a8:c2:ba:c7:cb:
bc:6c:12:01:76:99:32:93:33:3d:8c:fe:96:f9:6f:
34:c4:53:b9:65:4d:6a:1d:f7:1f:4d:1b:9e:2c:9d:
0c:a8:70:23:46:6e:a6:e0:2a:39:ce:2c:68:ad:4b:
ed:38:37:3a:07:8d:aa:6c:77:06:b4:67:04:f1:a8:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:3D:EA:D2:BA:11:3D:6D:91:F2:E6:D2:49:00:BC:9E:6F:F0:A6
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:25:ba:4d:20:b1:05:d4:db:fd:af:c5:18:ee:56:d3:ce:
0f:73:7d:d4:ea:11:70:59:f7:f5:c8:c4:f3:45:3c:63:4c:43:
b7:c4:40:2b:8e:cc:cf:43:0d:2c:44:a7:60:0f:8e:45:97:b7:
7a:29:29:ae:8a:88:7d:03:f6:ea:5d:17:a4:00:de:eb:df:6d:
13:7f:7b:ac:8f:e2:19:49:62:44:b9:89:20:4d:bd:1b:c8:5d:
7e:46:12:1d:55:47:8e:f7:99:04:25:a5:e5:5f:29:c4:b8:c3:
ba:54:d0:cc:3e:ce:72:0d:34:76:76:3c:c1:eb:1e:05:d2:eb:
c3:2f:b6:76:30:5b:41:ac:d6:76:56:52:e7:e9:a2:ae:c8:0a:
71:57:84:59:99:ce:8d:64:48:79:97:05:8b:46:ab:25:7d:7a:
9e:3b:36:13:19:3f:91:c3:c0:e7:cc:3b:8e:b1:36:54:8a:d8:
8a:d4:e0:7a:23:84:6a:36:94:5d:68:3b:23:39:e9:3e:9e:d6:
44:ab:5c:bb:3f:29:59:d2:19:5f:a7:8a:f6:25:96:00:c5:2c:
e1:c1:dd:88:60:be:ac:50:82:36:4a:e3:8a:32:02:90:40:aa:
8a:2f:fb:a0:08:40:23:20:3a:1c:4b:7a:f8:37:fa:27:36:9e:
2a:73:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:07 2025 by rpki-client