Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File: 1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier: G/z9flycLl0qPL0avK3uQThS9M3q/j0y4gD8+3eN9Lc=
Subject key identifier: C3:01:0B:0C:0F:A6:82:82:36:C7:E2:7C:68:0F:7C:70:AA:39:15:84
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 0194BCAA344C1F4247914B00CF9BA8293AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number: 0D05
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: eprhWfecQ1zqZrS1UI9kUXxVurRhsLLnGBEm86QG45E=)
2: UljtGTk6FE5SFIVhbxqvXUbkWqc.roa (hash: JzByF342QYXpOV0k7S0SEeUJe7klEsAVIE0a0wTpdvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:4c:1f:42:47:91:4b:00:cf:9b:a8:29:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=c3010b0c0fa6828236c7e27c680f7c70aa391584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:8f:c8:d0:a3:2f:56:9b:f7:5d:80:83:10:
21:cf:a1:7e:2c:61:05:1b:71:e2:6f:51:47:29:14:
8f:56:0b:56:23:07:c3:2b:a3:fa:e2:15:69:76:aa:
c6:d8:f5:54:64:5c:db:22:7e:09:05:31:1b:77:c8:
26:c5:4d:4e:b9:25:6e:27:82:73:db:94:60:51:f8:
42:b7:91:03:f2:d1:29:2f:3a:02:92:a3:bb:6c:b4:
c2:98:07:b5:d5:36:f6:da:fc:e8:e9:7c:33:e1:ae:
6f:0e:b8:bf:51:48:45:e5:c1:4a:da:48:0a:e0:e6:
4a:23:db:d7:ff:4a:24:82:dd:ef:8a:e5:c3:f6:58:
c9:00:c5:a8:73:85:86:ea:5a:65:53:74:f0:c0:4c:
37:d0:5e:08:43:b1:ef:7d:5c:54:b0:96:70:09:e7:
23:c8:9e:02:1e:47:75:72:b9:10:b5:81:e1:9b:ca:
3b:9e:54:d6:48:ea:49:d3:60:1a:47:98:2c:17:a7:
64:23:6b:38:e7:3e:8c:62:b1:72:ee:ab:44:2f:f6:
d3:34:ad:2a:5d:0b:19:ad:a1:1e:30:ef:73:b1:b6:
f2:09:60:51:f9:68:cb:9b:f5:4d:ec:08:ef:f4:65:
3b:1f:3d:66:93:95:54:e4:d7:7c:30:26:ac:22:57:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:0B:0C:0F:A6:82:82:36:C7:E2:7C:68:0F:7C:70:AA:39:15:84
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8f:9a:e6:60:42:fa:ab:d3:40:19:23:35:8f:01:a9:b3:6e:
12:ee:95:38:be:f2:60:32:be:67:a6:fe:11:30:b1:39:72:e1:
e5:b5:40:f1:2f:36:85:ff:e8:04:20:ed:41:41:cf:e0:df:1d:
a0:d0:73:08:45:b1:d8:94:56:6d:ca:87:dd:f0:a9:b2:73:83:
6d:68:27:a2:96:0d:67:d6:c6:22:1d:a8:96:3f:d8:75:b3:e0:
03:ab:92:6b:92:d4:7b:32:2c:6e:8f:ee:75:55:27:62:e0:c9:
e0:ce:f0:64:bc:63:bf:92:ad:71:2a:d3:3d:0d:12:65:a0:20:
1c:93:fa:a7:3d:86:31:ba:55:d2:1d:2d:e0:97:d3:ba:f2:9a:
ec:c0:3e:45:61:65:67:e2:10:77:ec:e9:6f:ec:0d:0a:75:b5:
06:80:ee:df:20:00:96:fe:2f:04:f8:f9:a9:f7:05:a3:75:51:
b0:e6:06:3b:0a:49:53:32:9b:ef:fe:c9:5b:99:2c:bf:ef:88:
6b:33:eb:c9:12:11:e6:e6:76:af:e6:a6:1c:68:f1:04:8d:af:
a5:97:23:8d:9d:8a:50:19:74:71:3f:41:f6:71:9e:d4:9e:f8:
18:d0:2d:7c:68:b7:03:c7:14:77:30:27:74:74:35:94:03:cb:
c3:66:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:17 2025 by rpki-client