Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
File: FZe51zSAyiLL8x-q8LzL7TCyCV4.mft (raw, json)
Hash identifier: y8b0xu+Gr+PCW1pta7IIBa/cqO1OoeUytaN8Qro+TZg=
Subject key identifier: 04:4F:A2:86:6C:77:D8:F6:B9:FA:8E:FB:CB:96:3B:89:BC:93:DA:DF
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 0194BD4EB8EB5669663C003813CCE5276F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
Manifest number: 04B9
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: FZe51zSAyiLL8x-q8LzL7TCyCV4.crl (hash: XFiews7x2TJ6gDofPlE2Haq5fLdqcpDijW8DPqkGvTc=)
2: KxRNTvfcdP27-i8KDlCuxj_UX9s.roa (hash: olLk9GQzBEMbkOZCVQ+if+KnQS1x8YbAz2sIcJuFwbg=)
3: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (hash: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:eb:56:69:66:3c:00:38:13:cc:e5:27:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=044fa2866c77d8f6b9fa8efbcb963b89bc93dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:09:4b:01:ac:f4:b7:ff:3a:82:df:b1:ea:
0b:2d:bb:12:59:11:12:b5:f9:1d:56:75:38:e4:d7:
be:75:0e:d2:d2:16:d7:73:be:a4:6b:9d:42:dd:c3:
7c:be:e5:a5:c4:60:9e:08:e6:a4:b3:09:a7:45:d6:
2e:49:52:18:48:74:fc:b4:4d:80:a5:e6:a7:9c:d3:
66:72:16:38:5b:a7:3c:db:a2:ce:56:b3:cf:c4:3a:
43:b6:e9:92:ff:62:ab:97:d2:5a:9e:d1:15:42:16:
93:0b:0f:7c:a5:dd:24:f5:bf:fa:9f:4a:55:9b:86:
65:f7:36:6b:d0:cf:73:b3:f3:c8:13:91:64:c3:86:
bd:49:48:ce:1f:4a:6a:20:f3:36:c9:73:38:df:4a:
6e:05:9c:9f:93:4c:cd:f3:6a:69:0c:01:da:31:33:
59:a0:03:9e:f3:5a:c9:eb:26:6a:95:60:82:89:8a:
bc:e9:c7:d6:10:1a:2e:da:5c:20:2e:17:8b:d9:39:
39:de:ea:c0:61:c6:c4:3e:74:3d:63:e0:bb:7a:19:
3e:74:19:aa:02:de:d8:80:7a:96:25:0a:2f:6e:d8:
29:fa:5e:d7:65:4a:37:01:de:f4:40:80:5e:b6:9e:
61:33:d8:43:72:c4:1e:df:f1:e0:fd:1d:03:c8:18:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:A2:86:6C:77:D8:F6:B9:FA:8E:FB:CB:96:3B:89:BC:93:DA:DF
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:f2:45:e8:64:26:59:7d:1d:88:ba:e5:7c:04:7e:2f:ad:
79:f9:e4:f1:3d:11:2c:57:16:95:fa:58:6c:f9:1a:b7:e6:88:
29:6e:66:8a:46:6c:81:b8:cc:49:33:e3:4c:17:e4:2c:e6:b1:
38:ad:4c:38:63:06:0b:b7:9c:b3:fe:55:a9:1d:7d:f3:73:68:
4f:c3:26:a6:d4:dd:5e:43:b1:a8:7d:88:43:31:9c:ba:9e:1b:
47:f1:4a:84:43:1f:a0:f2:d0:62:2d:95:11:f6:16:7c:b0:03:
74:56:1e:f1:5e:78:7b:1d:60:91:3f:9d:fc:14:38:8e:4a:49:
cd:35:55:a4:5d:08:a7:28:c5:e4:e7:9e:ab:4e:26:c2:2f:d4:
f3:1f:5d:18:84:c7:3e:4d:30:9e:17:5e:01:d8:cb:b9:2b:bd:
02:be:4d:cd:72:c8:53:98:19:76:3d:ef:8f:a1:59:fe:87:2f:
da:6e:5a:8e:47:b5:e2:91:62:f6:e8:dc:39:1a:60:da:1f:63:
fd:fc:06:d7:20:18:e8:53:50:8c:76:0f:f4:19:f5:bf:f9:d5:
7c:2c:a5:00:2e:f1:16:35:5e:d1:57:4a:2b:12:b5:5b:40:f0:
b0:83:2c:9e:5b:cb:4a:19:1a:b1:b4:52:40:99:b3:e7:93:8c:
f2:52:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:32 2025 by rpki-client