Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: EL6NduuCgYOfLlE9XH/E/JkIT3G0d3TAixWIUsMr8eU=
Subject key identifier: 0C:FC:54:25:31:8A:94:9E:32:7B:73:2D:BF:4C:E9:EE:21:7A:00:79
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0194BCE0A05DAF89ECF48D19B3213AF8C71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0220
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: QMbtrggNlY0l2CwTllU1nCrqJxH1ZLjNHWCzM9iqsS8=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:5d:af:89:ec:f4:8d:19:b3:21:3a:f8:c7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=0cfc5425318a949e327b732dbf4ce9ee217a0079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:9e:2d:c6:5a:05:e3:68:f8:70:93:b2:df:
16:ea:e7:5a:a7:55:c4:f0:9f:02:ac:81:44:b5:50:
82:6d:aa:c0:be:c8:5e:c3:69:fe:c3:23:c4:ae:e8:
67:df:45:25:da:ac:6d:9e:ab:de:b8:09:8e:d4:1e:
d8:3c:6c:92:dd:be:e0:94:57:6f:bd:28:e6:7f:13:
74:aa:2b:e3:df:83:78:dc:2a:ac:9a:08:9e:5d:44:
a5:bc:66:c3:63:49:8c:12:7c:9b:70:b9:24:fc:96:
53:e2:5e:b9:d0:45:ab:8c:c4:23:70:e0:2c:52:b5:
03:f9:b5:24:bb:0a:d3:ae:e5:9c:38:92:0c:27:d1:
a2:8c:7b:4c:f9:78:b1:37:ee:95:e9:d9:ca:31:2e:
6e:a1:f7:0f:1d:82:87:82:fe:f0:7a:0c:c0:cc:49:
d2:68:d2:46:02:94:f7:93:07:ff:0e:8c:49:3d:ec:
38:92:37:fc:bb:5e:b2:f8:86:4b:c0:41:76:2b:b6:
d7:91:a3:fb:32:f7:c1:38:aa:2f:9b:62:b5:f9:d5:
c0:e2:6d:0b:e1:35:06:e8:3b:03:ce:65:37:67:51:
33:23:76:a7:e0:e7:a1:44:e7:0a:46:56:e7:69:0d:
3f:8c:60:59:ef:c5:53:6f:df:7e:1b:7c:0c:ed:a6:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FC:54:25:31:8A:94:9E:32:7B:73:2D:BF:4C:E9:EE:21:7A:00:79
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d0:9e:84:9e:bd:54:cb:95:b9:33:38:09:d3:ec:47:27:2f:
5f:86:ff:b8:7e:10:cf:57:7d:00:4d:b6:f9:38:4b:55:d9:9a:
14:bd:99:00:e2:8c:c1:4f:59:de:b1:52:8a:83:d4:57:7a:4d:
f6:7b:04:c5:67:dd:ee:c4:d6:a0:cc:91:18:a4:c8:44:2e:6a:
ae:36:ea:bd:09:64:5d:15:2f:8e:60:63:39:0e:bd:32:ee:73:
a5:e1:12:db:b6:e1:cc:c7:ed:98:6d:36:6c:2c:dc:db:63:8a:
31:26:1c:83:bc:7f:8d:79:44:9c:01:bc:99:3a:3f:87:ce:1a:
e1:6d:d2:31:8b:e7:37:fd:f5:d7:e4:96:4e:6c:d5:b5:b4:05:
93:47:a0:0f:aa:a6:5d:ee:92:dc:f3:46:2f:b3:01:3b:93:eb:
29:c4:fc:cd:34:5e:a6:e3:d2:23:9d:1e:05:fd:fb:65:e4:88:
97:74:2d:36:fc:d3:ef:06:43:4d:b3:ab:ec:65:74:7f:06:c1:
0a:31:0e:a8:f3:a8:78:cb:d6:70:1d:e4:1e:dc:2e:41:33:80:
2a:82:31:c1:ae:db:d1:ca:84:6f:cf:ac:e2:1e:c5:cd:cc:e0:
56:2c:00:d9:2a:86:16:09:62:45:2f:c9:d0:e6:55:bb:1a:50:
69:16:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client