Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/1-qBnFi4iCdxsIWumz82L5tc4YXk.mft
File: 1-qBnFi4iCdxsIWumz82L5tc4YXk.mft (raw, json)
Hash identifier: eeSuosknzvlb1u0pt/RNgwxJIzXmVWiJwh2MFhBl774=
Subject key identifier: 5B:16:64:CD:61:E5:98:6B:84:37:2A:A3:8C:1B:65:89:8A:3B:42:49
Authority key identifier: FA:A0:67:16:2E:22:09:DC:6C:21:6B:A6:CF:CD:8B:E6:D7:38:61:79
Certificate issuer: /CN=faa067162e2209dc6c216ba6cfcd8be6d7386179
Certificate serial: 0193E195C5CB32E4F0A518C9FB5CBB5A7E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qBnFi4iCdxsIWumz82L5tc4YXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/1-qBnFi4iCdxsIWumz82L5tc4YXk.mft
Manifest number: 08CB
Signing time: Fri 20 Dec 2024 01:01:49 +0000
Manifest this update: Fri 20 Dec 2024 01:01:49 +0000
Manifest next update: Sat 21 Dec 2024 01:01:49 +0000
Files and hashes: 1: 1-qBnFi4iCdxsIWumz82L5tc4YXk.crl (hash: XShmOivs+ukLgmX0yeYrygJWW61/GGlXyDr8MklPXfs=)
2: m_nVT_XFUTDjONOqRwWt55Na218.roa (hash: apjyqzLLgN8ZgdKV886kZTBobOkmZ8IhdrjD9J7g6yE=)
3: xmA1Hv7SK78O4OiQIjbpmlIwZGM.roa (hash: Az/n8IbGfCPmIkj+Pv6glZq8VUChanfszofybsY4IwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:95:c5:cb:32:e4:f0:a5:18:c9:fb:5c:bb:5a:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa067162e2209dc6c216ba6cfcd8be6d7386179
Validity
Not Before: Dec 20 01:01:49 2024 GMT
Not After : Dec 21 01:01:49 2024 GMT
Subject: CN=5b1664cd61e5986b84372aa38c1b65898a3b4249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:cf:3f:02:8d:3b:a4:c8:87:48:7e:13:b6:
56:a8:93:c7:1e:ef:08:98:be:a7:0d:6c:63:b1:c3:
6a:05:0f:ac:e8:6e:56:d0:0b:bb:4e:1e:54:9e:09:
81:6e:c6:43:30:f0:56:97:ab:6b:28:dd:bc:0c:54:
e8:9c:36:7e:8b:13:f2:de:37:73:ba:c4:8e:fc:54:
6a:5c:5e:9c:05:89:9f:f6:f9:f0:8d:e1:70:61:83:
cc:f7:c6:7d:43:8e:c9:e1:7f:b7:ed:8d:fc:4f:1f:
2a:0b:61:2b:d9:b8:de:15:c1:bc:6d:97:6a:35:da:
2b:89:b3:91:bc:f7:24:62:c5:d2:e8:38:1e:4c:ef:
34:5f:c3:70:3a:88:7c:95:2c:cf:b3:44:e1:e8:5e:
fa:43:35:fa:b8:3a:8b:76:da:bf:63:3d:c4:5a:95:
b3:cb:58:33:8b:7e:02:1e:ab:ad:69:27:08:50:65:
b2:a3:aa:ef:23:10:bc:92:01:71:34:38:dc:00:58:
77:c6:50:1c:c6:a1:67:51:37:9f:ae:43:90:7b:72:
cf:0c:56:ca:cf:f3:76:b8:9a:13:da:42:d0:f0:24:
69:db:b4:50:25:76:2c:2f:3e:ff:f2:4f:73:e0:db:
6c:3e:e7:dc:1f:3e:61:99:2e:63:63:eb:e2:33:69:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:64:CD:61:E5:98:6B:84:37:2A:A3:8C:1B:65:89:8A:3B:42:49
X509v3 Authority Key Identifier:
keyid:FA:A0:67:16:2E:22:09:DC:6C:21:6B:A6:CF:CD:8B:E6:D7:38:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qBnFi4iCdxsIWumz82L5tc4YXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/1-qBnFi4iCdxsIWumz82L5tc4YXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/1-qBnFi4iCdxsIWumz82L5tc4YXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2b:f9:72:10:28:bd:ab:5e:1a:36:d5:08:19:cd:50:5f:a1:
cd:b7:b7:78:67:1a:7e:5f:68:94:83:5a:57:ea:88:bc:9d:a6:
87:56:20:c4:cb:70:e5:5e:ae:a4:95:bc:32:1d:63:fe:94:d8:
b2:94:89:77:38:82:e3:f6:aa:1e:81:73:b8:4c:ac:fa:b8:0c:
4a:9f:ae:70:d0:e5:65:19:9b:95:fe:e6:8e:ae:67:83:a8:a6:
e9:e8:62:84:f7:64:b0:22:81:44:4c:2b:54:89:72:c7:20:b9:
b7:d6:d8:79:ef:76:76:bc:4b:a7:27:5d:b5:a9:1b:bb:41:a3:
df:63:c5:a0:52:2d:1b:08:67:70:8e:9e:66:06:a6:17:b5:68:
e4:2f:84:da:d1:ad:2e:df:e7:2e:58:2c:98:15:a5:28:31:6b:
fb:ba:ef:d8:46:5f:68:cb:a4:ea:f3:60:5b:37:52:3d:eb:91:
79:ee:5f:b5:d8:4e:9b:43:3b:21:14:e9:06:69:61:7b:c6:80:
5e:00:9f:d2:46:17:fb:20:56:e0:a3:95:63:87:a2:3e:60:ea:
dc:ed:24:f9:5f:2b:c8:e6:7d:05:78:fb:54:df:a2:60:d8:e6:
c5:60:7d:07:4c:9a:9c:71:c6:25:47:8a:ff:8d:01:89:76:69:
49:68:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:19 2025 by rpki-client