Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: cSW23CRY50ZRaiNjEDHLOEF15PlGiAtv9pymGsU7wGU=
Subject key identifier: 8F:D0:7A:FC:C1:B5:17:2C:5D:39:A1:A2:D2:5C:0E:1E:0B:D0:B1:3A
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0194BD4E6C633D34B2549EC0D7FB1E163A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 0DD6
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: iIXXj1BE6MLQN8GAmVBYSiNS2U6xhbMnXOeORJXsp0g=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:63:3d:34:b2:54:9e:c0:d7:fb:1e:16:3a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=8fd07afcc1b5172c5d39a1a2d25c0e1e0bd0b13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:c4:f1:ca:72:1f:cd:a5:0a:b8:fe:a6:d2:
7e:5d:d1:ab:21:d4:3b:37:90:82:8d:73:d4:4e:b1:
96:60:c8:76:63:42:b0:47:47:d5:87:fe:1b:e7:1d:
ea:91:fd:e0:df:5e:30:bf:c8:a7:62:6d:3b:6d:76:
b6:f7:1a:18:03:f6:f2:26:5d:ef:7c:b2:c7:ab:14:
6e:81:a2:09:33:e7:d0:99:1a:81:79:78:81:6f:33:
0f:ae:dd:6e:9e:17:06:3d:4c:08:c4:75:89:5c:a2:
3a:b8:ba:17:ae:41:81:9e:2c:0b:18:e7:67:1a:ae:
85:1e:08:07:28:2f:a7:ec:cf:b4:4f:7d:93:51:5a:
70:82:bc:12:a9:01:9d:e2:9e:39:e3:cd:72:e0:51:
38:67:d0:ae:3b:d4:45:9b:a1:d1:fc:4d:4c:fa:27:
ba:21:a3:46:50:2c:e0:bc:5e:d3:3e:cc:37:76:62:
6a:f6:c1:8d:7c:61:23:e6:9d:7c:2b:bc:09:07:35:
bc:f5:c8:7b:71:40:60:e5:47:0c:26:7e:25:ea:10:
c2:c5:30:c4:a8:8a:c3:68:e8:57:a7:5f:cc:ea:e4:
17:a7:af:71:51:a3:d0:a9:18:18:30:17:0d:a1:bb:
d2:79:25:fc:45:88:7a:cb:52:ab:dc:d8:e4:a3:4d:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:7A:FC:C1:B5:17:2C:5D:39:A1:A2:D2:5C:0E:1E:0B:D0:B1:3A
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:41:3f:18:17:17:31:45:4f:ce:0a:47:a1:3d:cb:d0:24:82:
d2:f1:51:e6:21:ed:91:91:13:e9:33:0d:8e:51:e7:be:3f:c6:
1c:32:67:bb:7d:61:51:ca:0c:2b:14:51:9e:76:e8:ab:b1:ff:
1f:c7:e4:c8:08:48:b1:8b:5e:4b:d1:d9:a8:fe:90:0a:6b:fa:
44:be:34:5b:46:4f:b2:84:7e:96:2d:a7:32:d4:3b:59:f8:eb:
6c:6b:34:b6:10:37:d0:08:ce:c5:6c:9d:23:56:bb:28:3f:dd:
12:ac:91:26:89:f2:6c:24:02:a1:a2:0b:f8:b0:33:5f:b2:86:
3c:54:bf:cf:f7:d3:b6:27:74:29:d1:22:bd:c5:27:1f:d9:a5:
62:35:80:1d:0f:da:0f:c2:4c:02:9b:a3:74:9d:22:e0:d2:3e:
67:ec:81:3d:77:8c:0b:8e:c2:f0:e0:6e:3b:ee:e5:9d:19:bc:
ed:fa:97:4f:38:f0:6f:5d:31:86:69:ca:8e:2c:da:3e:62:e5:
14:3b:0f:6a:36:5e:88:5d:f7:67:bb:c0:38:50:e5:89:b5:d6:
8a:ca:c0:c2:65:8d:04:85:ef:b8:63:01:a0:4b:8c:90:ce:8a:
52:dc:64:56:85:e6:2c:9f:bc:c7:43:c7:f7:6d:76:0d:1e:6d:
42:b3:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:49 2025 by rpki-client