Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: SCWfEKO5NBox9pxAVobjMv+zSwv0Yr2mcJ5w+O+cg68=
Subject key identifier: 00:69:C7:35:85:1C:2D:8F:BA:74:13:C3:59:25:29:27:F1:BA:EB:B2
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 0194BBCED345C3BBD6D730C77854940CB460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 0EAF
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: qU3kNTUDfRTXUbuPPgHmn9aFh7Fbixi4xXlkWDIHaX0=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:45:c3:bb:d6:d7:30:c7:78:54:94:0c:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=0069c735851c2d8fba7413c359252927f1baebb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:fb:1e:a6:37:2c:d9:36:d2:85:20:a5:2e:
7e:9b:cf:40:6d:6e:a8:b0:3f:34:93:1c:3a:b0:da:
8d:1d:e0:9f:9f:cb:0e:2d:2b:69:bf:7a:1d:67:84:
88:39:80:05:03:24:c2:37:a6:b4:a6:f3:34:bd:7d:
e7:6a:ab:d7:97:01:dd:6f:a9:00:fd:7e:b7:38:76:
20:22:fb:32:6f:8b:69:75:e1:95:4c:1f:5b:89:75:
f7:2e:38:d4:09:c0:19:f7:05:4c:ce:b9:a4:40:6f:
e7:64:73:3b:ee:97:b8:b9:c5:be:b8:14:96:07:7b:
dc:05:11:59:81:5b:75:e0:db:cd:f7:74:90:e7:b2:
72:8f:fc:78:34:3f:eb:8a:65:96:ea:76:f0:6e:4f:
a9:2c:ac:ef:f6:95:39:94:6a:ac:ad:2b:ee:bc:00:
20:5c:49:28:80:14:aa:40:3e:86:46:a4:61:1f:92:
ea:e7:21:70:8f:f7:cc:56:2e:bd:b4:77:69:88:5a:
cf:bc:8e:ac:92:73:4c:1f:54:5e:f1:9f:09:b2:06:
4f:b6:f1:b2:35:29:0f:ed:18:81:61:c7:b0:94:fe:
d1:ef:da:8f:48:fd:ac:22:87:fd:5f:cf:67:db:ea:
b1:3b:54:b3:7b:ab:00:3e:08:ba:dd:cc:51:26:39:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:C7:35:85:1C:2D:8F:BA:74:13:C3:59:25:29:27:F1:BA:EB:B2
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:c4:6a:6b:25:55:ed:e1:30:6e:ef:76:07:10:eb:a1:32:
5d:ce:bb:f1:5b:e5:f5:f7:7a:26:d2:0c:a8:dd:74:12:f0:52:
36:27:f6:12:b6:f7:17:db:43:45:fd:6c:d5:39:37:be:d2:2f:
25:42:da:e4:54:e3:3b:1e:92:8d:99:77:32:ef:22:74:24:4f:
cc:4a:47:27:48:84:f3:ab:ad:5b:3f:0c:8b:16:bc:8e:90:92:
69:7c:72:94:17:25:36:c1:19:39:fe:e2:f2:15:5d:9d:b2:05:
e6:bb:4b:93:fa:5a:c6:03:14:d3:5d:5c:2e:d6:2f:df:b4:c2:
32:10:8a:b4:10:03:02:c4:01:db:8b:f3:3c:6b:68:7b:a1:f4:
7d:04:99:a4:78:27:0e:86:ac:6c:03:ec:39:e0:a7:30:97:10:
10:c6:16:fc:a6:27:6a:14:d7:d9:8c:8e:3a:5c:c3:0a:ff:5c:
b5:d6:02:7f:87:f9:d3:82:a1:4a:8e:8a:ef:d0:07:3f:e2:c5:
20:13:e7:a3:24:b1:f3:54:9c:92:b5:8f:41:33:23:bc:e5:54:
51:80:3c:aa:ff:d8:f5:2d:53:f8:57:18:54:0e:ee:89:ae:5a:
cd:42:af:02:22:c0:39:31:fa:e8:b3:09:5b:1a:0f:a0:a3:90:
bf:ee:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:27 2025 by rpki-client