Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: WpeWgpFe5AsyYbcT9zS1Ysc3T2QOxd63aJ9RLl3xVzI=
Subject key identifier: 56:86:63:38:D6:B3:26:EA:57:7C:F7:5B:B9:32:67:40:AB:0E:7A:6D
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 0194BCE0C9C6D73BD947733CB4C51DEF6738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 0131
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: jKTRo8bXmxkuj3/wIzoXJiLfPOXpI1vS3xpp8zr+6YQ=)
2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c9:c6:d7:3b:d9:47:73:3c:b4:c5:1d:ef:67:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=56866338d6b326ea577cf75bb9326740ab0e7a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6c:17:53:d4:2b:6e:6e:4b:65:08:e4:da:2e:
ab:a9:67:dd:ee:95:49:10:68:73:8c:b6:48:32:6b:
33:45:4e:e9:a9:74:b3:2e:5f:8b:96:ad:51:3f:71:
5c:d3:da:04:7e:d5:db:ef:d8:d7:98:31:63:28:bf:
53:81:75:6c:b8:e0:01:e9:35:ba:25:62:de:66:1b:
07:90:89:63:b5:ec:e7:63:fa:90:34:63:d9:6b:67:
7b:01:e6:9b:c4:2a:4a:51:84:26:f3:ee:23:b6:39:
b3:5a:a1:7d:eb:3f:3b:e5:28:10:60:2d:83:5a:43:
92:2c:43:4d:7b:4c:3a:66:fb:94:24:2e:77:73:30:
fe:5d:2e:53:aa:e7:2a:88:99:af:ee:55:70:07:9f:
1c:d6:ee:d6:5a:ff:0e:f1:da:5a:cd:e9:7b:eb:b0:
2f:9a:16:9b:3b:8e:bf:6a:c3:7e:8b:e6:02:e1:07:
80:24:6c:7f:5a:b0:64:65:70:40:7d:e6:fc:61:b9:
9e:87:0e:48:91:1d:06:7e:aa:c0:3c:5a:35:8b:98:
f7:b0:73:62:9e:d6:b4:40:8c:08:70:58:e4:4e:53:
54:b0:09:b1:42:02:4f:1e:39:63:2f:2b:27:8e:4d:
3f:4a:f3:71:a2:3e:04:13:a3:32:e7:5f:b1:39:c1:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:63:38:D6:B3:26:EA:57:7C:F7:5B:B9:32:67:40:AB:0E:7A:6D
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:ca:7d:c4:a4:0e:aa:42:6c:ad:00:b6:fc:b1:48:7d:72:
0d:4b:52:8a:b6:16:c3:73:75:58:aa:28:78:f3:f1:af:86:e9:
f5:d6:97:e8:f3:a9:34:77:48:db:a2:a7:b6:96:a3:c7:f2:e1:
32:f8:6b:74:84:ab:aa:92:95:5e:cd:db:da:8a:b8:2e:00:93:
f7:c1:29:17:72:30:a8:ff:7b:19:ef:6b:18:9c:4b:64:43:27:
b3:39:02:25:80:43:38:c0:69:ac:7e:a3:75:10:00:45:be:55:
d0:9a:af:32:aa:20:b5:7c:a4:64:44:1a:06:59:32:a6:27:5b:
66:3f:0c:89:36:03:61:ae:4d:6e:45:40:ba:cc:18:cd:89:f6:
95:4f:ac:ff:97:cf:3d:a2:5d:f4:22:fe:bf:7e:80:1b:8f:24:
1e:ff:16:bd:74:a6:0a:6e:09:c6:0a:67:00:b2:5c:31:60:c2:
26:c8:96:0f:fd:47:b9:52:41:3c:55:50:95:f8:0d:f1:ea:56:
ee:2d:7e:9f:f8:1f:f4:0f:4c:49:e7:31:63:fd:ce:de:b7:ff:
67:ab:7a:41:ba:bf:11:09:3f:60:6a:03:f0:3b:bc:b3:a8:70:
eb:a9:ae:dc:b6:f4:3c:c7:4d:3c:2c:34:41:d1:7a:f3:d1:e4:
89:eb:90:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client