Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: mGqDCz/LiFSOv19ePhohnh5j+wKswNyHjC9fK12wrzg=
Subject key identifier: 91:EF:8F:30:C2:F9:FD:66:40:82:29:25:DA:17:C9:70:D3:72:C7:56
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 0194BD8548A30D1C5C5E46AEE4FB9C3EED7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0912
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: 8QD3lOU/emjCV+wUBHcs2V1hKYVTno2AErIHlMN3+gE=)
2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:a3:0d:1c:5c:5e:46:ae:e4:fb:9c:3e:ed:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=91ef8f30c2f9fd6640822925da17c970d372c756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:ab:7a:9b:95:78:b7:3c:16:98:d1:01:ab:
d0:62:37:f7:3b:58:f9:f7:a4:cb:ce:68:48:0d:fe:
8c:43:0a:01:45:19:7c:ee:ae:3f:36:c2:40:28:25:
ea:7c:5b:6f:36:fa:d2:b1:36:2f:8b:04:9a:0d:e4:
07:dd:e3:cc:05:53:e6:b6:a5:4c:9e:e0:e5:94:c8:
d1:b6:ea:4f:de:f9:53:b6:3f:ab:57:58:90:50:7e:
0c:8a:59:3f:c9:d7:e4:ed:31:2a:c8:56:c1:b1:0c:
bf:5b:8a:dd:00:a6:6d:a4:ea:a1:a5:b1:e8:ae:93:
9c:b6:45:8d:d8:a5:69:76:42:76:c1:44:7a:b7:86:
1c:11:59:48:4d:26:d9:a5:81:75:39:ac:2e:65:b0:
44:07:07:59:01:b7:46:ce:65:d7:a7:b8:c5:56:f3:
25:6b:f1:dd:f0:7c:5f:a6:5c:70:4a:40:1a:e5:98:
bc:29:4a:df:c6:c9:f9:30:6a:ab:8d:8e:0c:5f:62:
17:3e:ec:fc:c5:93:94:eb:5b:6f:99:bc:ff:79:bb:
b9:0c:b1:bd:c0:3f:cd:03:32:a8:e8:9f:8a:1d:f9:
61:50:79:03:1d:c9:be:f7:3e:bf:61:ff:87:03:6c:
6f:3c:f3:81:d2:69:37:44:96:d7:7e:43:83:77:e1:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:8F:30:C2:F9:FD:66:40:82:29:25:DA:17:C9:70:D3:72:C7:56
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:50:ab:1d:a0:5d:c8:18:ce:09:85:ac:08:8c:73:83:ce:64:
7b:de:ba:e0:21:74:06:b3:eb:89:66:97:6e:96:b0:88:4f:a1:
3f:5e:bb:13:4e:f2:b0:a6:7e:27:26:85:b1:e1:c8:45:a2:01:
8e:b5:ee:93:f6:36:02:91:8d:67:5e:46:a0:a4:ef:c2:90:bf:
ac:83:67:be:de:21:7a:5d:b9:a9:ee:03:c1:20:07:87:71:70:
eb:eb:c5:1a:c3:ed:57:75:48:3c:aa:0b:8a:32:8f:04:ae:71:
7a:09:08:a5:dc:56:d8:6f:d4:cd:51:fa:fe:06:47:60:11:04:
5b:1f:b5:3d:68:d6:54:05:e8:da:cd:6d:c2:70:e8:85:93:58:
d8:d7:d4:78:7d:fb:f9:d0:3e:a4:ce:8a:60:b5:f7:ac:c9:96:
2b:b3:63:b3:1a:7b:1f:88:3b:e7:4f:d5:3c:f0:35:0d:d0:9a:
8c:1e:1a:92:34:c7:78:ac:c5:02:f3:b8:02:ba:a8:11:9a:d5:
0d:87:18:3c:0b:6e:f7:d1:62:81:9f:99:3a:db:02:0c:50:ef:
1f:d2:47:96:3f:55:2c:e6:17:3e:f7:10:cf:c8:25:82:23:bd:
7b:f1:ae:fd:9a:0b:cf:06:b0:77:c6:97:d6:3a:d9:13:11:68:
40:27:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client