Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: dNVU2XmictThbbjnzPWagtFI32CHd/z1GzaS1NVbBBY=
Subject key identifier: B3:3F:32:FB:DA:A2:B8:84:36:D1:32:EF:01:FB:6A:CE:68:73:5B:1B
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 0194BC72E8154813B4C7D598FE05BAFEAFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 0EC2
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: bRE3C5HgAGwo/iWUP2LlBLZCfpxXHcmQwC+pRpPMniE=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e8:15:48:13:b4:c7:d5:98:fe:05:ba:fe:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=b33f32fbdaa2b88436d132ef01fb6ace68735b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:e5:60:18:42:fc:3d:fa:d6:52:59:de:21:
1b:14:e8:b4:59:ee:f0:61:f8:95:8a:de:c7:7c:81:
47:f0:4e:3b:d3:bc:b5:3f:af:e8:22:82:c4:49:e0:
11:0f:4d:dc:3b:45:f4:a1:b3:b7:d9:ff:53:88:04:
6d:21:07:d7:f7:91:59:ea:d4:1c:34:f9:e1:80:68:
2a:84:7d:1b:86:af:f7:65:f5:b5:36:30:5b:86:88:
5e:4c:9e:63:1f:12:51:9f:b7:ec:ee:55:c2:a7:db:
17:36:2d:7e:fd:ce:ee:6c:34:fd:b9:d5:c4:a6:50:
02:a3:f5:a7:1b:5e:92:2f:9f:a8:02:f4:ea:76:a1:
34:16:74:b9:ca:b9:93:30:f8:2f:2f:38:46:e6:1a:
82:3d:96:5b:2f:61:58:ba:d9:fc:19:0e:92:1e:c5:
4e:02:9b:ea:7f:38:a2:ff:3e:5e:05:4d:14:80:a1:
47:71:0f:51:a1:e1:39:fe:52:f5:e7:61:9e:45:09:
b0:e3:76:0c:b9:71:ed:d1:44:dd:97:ff:57:7a:4b:
d3:e1:81:06:e9:4d:f9:80:f8:7c:b1:a6:78:0e:7c:
24:03:5c:c0:96:0c:9c:19:19:18:09:04:1c:d6:62:
57:bb:cd:53:92:75:ad:6f:e9:c5:5a:d9:e7:c8:47:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:32:FB:DA:A2:B8:84:36:D1:32:EF:01:FB:6A:CE:68:73:5B:1B
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:54:13:d3:d7:c6:3c:5a:bd:f7:71:89:68:25:f1:ef:14:40:
aa:d9:27:5b:2c:89:0a:f0:e4:e9:f6:c4:4f:63:cd:a6:ef:11:
0e:52:80:16:97:f5:75:e5:cf:2b:18:e9:e9:e4:2c:0b:21:0e:
b8:ee:b8:57:4a:4a:8a:ab:f1:dd:42:6f:ea:aa:a8:f9:e3:8e:
98:2c:6d:4e:41:e3:af:c3:45:ab:f8:d2:e1:cd:88:e3:62:ec:
24:5e:64:f7:25:c2:48:c5:80:1f:dd:4b:4d:8e:3e:e9:fd:d7:
be:37:6f:29:f3:06:02:20:0d:53:75:53:14:73:86:55:23:82:
6f:8d:8c:b1:98:ff:2e:a8:d4:d0:71:0f:56:64:64:78:c1:ad:
03:97:0c:67:8e:92:ad:01:3e:6b:b4:0a:fe:fb:a4:b8:30:60:
76:ba:19:9e:d9:66:43:bb:51:b3:55:59:93:6b:58:a4:58:ae:
4a:72:f6:97:2f:4e:0c:c5:d5:7b:d2:d9:83:15:41:c3:9d:f9:
6a:e7:cd:d9:29:dd:54:59:6a:f8:a3:76:9f:3b:6a:44:e5:93:
02:00:ea:16:83:6e:f4:52:96:64:92:77:2c:fc:b9:40:61:76:
16:5c:4f:e6:67:00:33:02:40:36:f5:6a:da:7a:6f:94:be:d4:
10:f6:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:05 2025 by rpki-client