Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File: 10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier: WJfcoHMmtqQFAuWbyqA0uRAQVoNXrrMdDWthTJhhVKU=
Subject key identifier: 86:16:9C:A4:2D:32:A0:2F:43:F0:5B:4C:52:9C:0D:15:1D:95:61:EB
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer: /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial: 0194BBCEC3AF97A7349C376172E2C5DDC720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: 8m6pv9o+JJfak5vQyvYffWhlKMjQjo7kE+EA2IyZXKQ=)
2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:af:97:a7:34:9c:37:61:72:e2:c5:dd:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=86169ca42d32a02f43f05b4c529c0d151d9561eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:b3:23:0e:ac:2f:87:9c:20:26:c9:a0:09:
8a:07:c0:c2:8e:65:32:9c:d8:0a:51:ac:4b:9e:c2:
30:18:48:d9:eb:6c:0a:3a:e4:4c:8b:8c:56:56:59:
16:5d:e4:db:1d:63:2f:e8:7e:d5:eb:92:fc:4d:2b:
8a:94:c8:68:68:79:b9:64:d4:ae:19:b8:07:8e:87:
28:ed:a6:3b:42:55:73:9e:7d:b8:67:b9:70:0f:b3:
6d:25:cc:ef:f3:de:47:72:9e:90:b3:8a:f8:2a:55:
3e:d6:63:91:f3:40:9a:3c:91:6c:22:bc:fc:55:7f:
8b:94:92:96:32:0e:2f:87:64:1e:dd:e1:1b:6d:40:
3b:8b:b2:d5:50:ba:37:21:8d:03:e2:c3:58:0f:5f:
df:29:70:7c:90:7b:fd:44:c9:98:0d:9c:4d:62:b7:
83:f4:04:80:ef:ec:23:fd:e7:23:f0:e3:50:8b:cb:
36:b3:cf:e7:be:4f:7f:8f:de:ae:a9:ac:c9:27:98:
79:84:73:cc:c4:83:21:17:e5:e5:25:f0:24:8e:d1:
69:6b:34:58:10:8e:5e:bb:84:50:3d:e1:94:fa:07:
b0:95:13:5f:8a:c7:41:02:f3:72:40:48:5c:6e:1e:
7b:17:fb:59:30:1b:fb:13:46:1f:93:1f:c9:4a:25:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:16:9C:A4:2D:32:A0:2F:43:F0:5B:4C:52:9C:0D:15:1D:95:61:EB
X509v3 Authority Key Identifier:
keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:ea:5b:61:5f:1a:82:0d:39:c8:ea:44:58:1a:ce:6d:5a:
6c:47:95:d7:04:78:34:a8:8d:21:33:84:f2:79:1e:8f:eb:88:
8c:10:3d:c4:e0:7e:8e:4a:4e:f3:79:1e:65:cc:56:31:86:d7:
43:0a:f0:52:e2:1f:64:b6:08:1f:00:0e:e8:44:02:ef:04:51:
87:f3:34:56:21:98:65:be:a0:83:0b:5f:b1:8d:65:97:ad:4c:
11:af:8f:cc:69:4c:c5:2d:21:68:ed:8c:b3:58:2d:4b:c9:51:
c9:ed:81:72:92:5f:78:3b:d2:d0:52:64:af:42:43:3e:48:73:
d2:5f:00:7d:b4:ed:da:36:1d:95:88:bf:3b:10:de:75:7c:94:
0a:f7:32:04:04:93:62:67:ea:91:47:8f:ad:44:33:0c:bb:34:
17:be:54:5e:2c:07:a8:b4:59:4d:41:b0:b4:f6:cc:88:b0:b0:
d9:18:52:32:c3:72:68:4f:cd:c9:6c:e8:a9:3c:fb:a3:8d:62:
55:13:7b:89:e1:e4:ae:b8:9e:8c:9e:c3:b9:d3:c4:1a:72:b1:
95:67:d0:19:3b:85:2a:e8:91:df:4b:fd:8f:1a:c7:e6:5b:3a:
a4:2d:25:6e:6f:b9:37:9d:8e:ae:6e:3f:03:46:4d:a3:71:dd:
74:0d:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:32 2025 by rpki-client