Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: Xr8Bbd1/x3kwfOrI9s+NsYL3+WS00whMNNez2lwpyTI=
Subject key identifier: 11:96:4A:4F:55:E5:E6:AC:F0:19:83:73:4E:F6:1C:87:CD:85:3E:36
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 0194BC3BB9A5C6E9371EA22AF581B923E867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: MFG43c2S1Zw8hqekryK+dK1fdePH9vqO8ky7DD4jLTo=)
2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:b9:a5:c6:e9:37:1e:a2:2a:f5:81:b9:23:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=11964a4f55e5e6acf01983734ef61c87cd853e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5f:47:7f:aa:26:03:45:a4:d7:0f:69:19:10:
86:91:5b:fa:9b:23:5f:d4:f8:26:34:e1:ee:42:63:
92:a8:4e:28:cf:e2:6e:1a:1e:af:39:5f:dd:41:e2:
a9:bd:0f:c0:5f:03:95:fd:1a:c6:9d:12:b1:fb:96:
2c:79:98:cb:8b:51:6f:c0:16:a3:cc:2e:72:0c:b0:
b1:16:45:1a:31:93:86:c4:43:65:3f:4b:72:6e:96:
7e:e3:f3:0e:db:f0:d2:49:b6:f4:f3:76:32:d4:18:
3c:0a:25:0a:0b:3d:57:09:a3:5a:28:91:78:5a:9f:
80:be:7f:d7:26:e7:e3:0d:1f:e7:84:75:27:dc:b8:
5a:48:3c:28:db:85:d6:3a:7d:bf:37:76:47:a1:e2:
c6:e7:08:76:1c:af:63:e2:d0:af:fb:2b:26:d9:23:
fc:6b:37:67:87:a7:7e:5b:31:4c:ab:16:d2:6f:2c:
76:f2:08:c6:db:22:17:fb:7b:0c:48:3a:43:51:42:
4c:dd:a8:50:0e:1a:71:e7:7c:79:8f:bb:1e:ed:78:
7d:0b:5e:cd:72:18:97:38:e4:f0:aa:ff:60:66:c4:
36:5f:9b:ee:ff:5f:2f:48:42:83:4d:bf:05:f9:9d:
ab:c9:da:3c:84:44:6a:9e:bc:87:e3:b0:0f:a0:9b:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:4A:4F:55:E5:E6:AC:F0:19:83:73:4E:F6:1C:87:CD:85:3E:36
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7f:89:a9:5b:4f:25:38:68:ce:f4:ce:bf:4a:65:08:65:81:
e6:aa:c1:0b:fd:90:30:10:81:c2:b0:56:a2:02:94:3f:43:6a:
42:2b:bb:93:e3:1e:4a:d1:c6:1b:9f:fb:dd:d4:6f:e2:0b:aa:
ab:25:b9:7c:4b:06:a4:b9:61:f7:5d:ab:06:46:1c:8f:11:8d:
7a:9f:1c:3d:0d:0a:6a:63:1d:ec:42:1e:4f:2b:c8:70:0f:11:
4b:c6:5f:61:ea:db:31:b6:84:44:0c:24:06:86:d9:3f:30:dc:
f8:cd:06:6d:2b:02:90:e5:54:4c:ae:2f:b2:dc:4d:76:ca:0c:
36:4c:95:f6:a9:17:54:6b:5b:1a:a8:15:cf:41:94:e6:7f:c3:
28:bf:28:15:19:58:62:56:17:c0:52:a0:ff:f3:36:f7:7a:48:
0b:05:3e:24:d3:cf:83:72:63:36:69:7c:27:73:b6:f5:e4:a5:
af:82:49:fa:fd:ab:3c:62:7d:2b:9d:b9:ca:01:20:2e:cc:37:
aa:f9:b6:1a:0b:5d:dc:71:4b:0f:90:43:1a:0a:00:2c:46:be:
0e:0c:8c:95:86:40:5a:25:f1:9d:f6:34:1b:c7:be:49:fa:6d:
ac:2e:74:5d:b7:cb:ba:45:67:51:d5:32:bb:44:62:07:88:0e:
59:14:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:57 2025 by rpki-client