Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: TL8dkQ8XlNC/QppPEy7B09j4XX5gBOokAY0Rofh5Wl8=
Subject key identifier: A3:6E:21:30:2B:96:D5:8A:78:7D:E9:AE:9E:8C:B2:48:FF:FD:AB:3A
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 0194BCAA15F696E8F7446B3F2A3C713C60B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 048B
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: pncWBBukLLZjnjwhLNuhbr2MD+L+vCV6gXrTcb77ph0=)
2: kidKlu5oDBem3t0h8aiG0Vv8dvw.roa (hash: Xo2YDFkznVnl+RRSUSAYifFOhE1syeVNtNcN0kJvN2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:f6:96:e8:f7:44:6b:3f:2a:3c:71:3c:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=a36e21302b96d58a787de9ae9e8cb248fffdab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:8e:16:66:2f:83:76:09:cc:07:96:b0:9d:
dd:b7:0e:5f:14:58:8f:ed:6d:59:bf:c6:1d:8b:b1:
32:f7:c4:ec:ee:5c:dc:32:b4:21:34:a7:d1:e4:92:
3c:d3:a5:fa:15:fc:01:fa:2e:58:0a:87:27:d7:87:
48:0a:fe:fc:e7:49:22:db:f6:c5:9d:e8:f3:7f:a9:
de:ea:16:d7:7d:2e:a7:18:a0:c1:31:35:94:bb:2e:
bc:3d:d7:78:7a:70:a4:47:2f:ac:02:27:53:be:2a:
38:cd:d3:dc:a2:16:da:91:f9:3c:14:94:95:36:cb:
44:fb:b5:7b:89:0f:42:3f:4e:63:be:20:bd:f4:c8:
3e:bd:71:a4:19:bf:f9:53:bb:a7:7e:29:31:23:8f:
57:b8:71:7a:bf:3d:c8:bb:c2:35:1a:0c:6c:1a:46:
9f:21:0c:4e:27:0f:8c:8e:30:4a:0c:a0:38:ae:78:
e2:5d:d5:3c:b9:a9:3a:b8:6c:be:1d:df:c4:b5:8c:
a0:91:51:67:43:cd:53:73:f0:b6:ff:60:b9:34:b2:
4e:15:40:17:64:a3:04:c7:2c:a4:2a:46:e4:98:97:
66:21:da:83:ac:80:da:2a:7b:bd:9d:c9:c6:cf:6f:
ac:53:60:3b:4e:e0:ac:15:d3:60:94:44:f7:b2:9e:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:21:30:2B:96:D5:8A:78:7D:E9:AE:9E:8C:B2:48:FF:FD:AB:3A
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cf:75:4d:17:ca:31:86:98:ed:60:11:db:3c:2d:17:b0:b8:
cc:c1:0b:7a:31:dd:44:2d:22:eb:b5:c1:ef:4f:cb:3d:cc:53:
6c:4c:68:14:2c:fe:c2:72:c2:8c:05:7c:9d:87:7c:be:83:07:
16:41:7d:5f:07:30:51:7c:f8:ce:1b:11:e0:4a:dc:cc:95:88:
7a:f9:96:0a:7b:b1:e1:46:78:6c:dd:82:ce:25:6d:a8:0a:11:
d8:10:de:48:a8:85:2d:c9:63:db:9e:57:bb:18:c7:d5:f0:16:
4b:44:a9:f4:53:68:5f:f1:18:cb:a7:bc:ec:90:07:b1:fe:18:
e4:9f:fa:de:d5:a0:e5:e0:98:cd:ad:f2:54:e8:5e:6d:07:91:
ba:60:14:91:eb:89:66:87:c5:3e:51:b2:92:0d:a3:95:0b:1e:
79:08:3b:d5:08:d8:05:12:4f:c4:c8:ab:f9:41:eb:2e:fd:2a:
ce:06:51:b1:02:15:be:a6:d6:e1:39:b6:bd:21:fe:e4:3f:bb:
9d:72:51:b9:5f:74:2b:6e:98:74:03:78:d2:1e:88:3f:9f:68:
01:d6:1a:0e:a2:99:cc:dd:db:c8:fd:6b:de:2a:fd:f7:b6:82:
a2:fa:66:2f:57:1f:5b:5b:1f:ee:af:54:e5:02:e8:72:84:94:
77:1a:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:29 2025 by rpki-client