Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
File: 1nSvl-7USr-_pNAi_3Xwd86qQOE.mft (raw, json)
Hash identifier: 1yv0YDKEp171a8gc7Hj564pGzkqNCntZ84gl9sEZY10=
Subject key identifier: FE:CF:F8:19:47:84:85:7D:CE:6B:B0:3D:AB:9F:24:2D:F9:EA:95:7C
Authority key identifier: D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
Certificate issuer: /CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Certificate serial: 018D64C1AA76E038CAD8F7313C11ED9E9611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
Manifest number: 0850
Signing time: Thu 01 Feb 2024 13:00:30 +0000
Manifest this update: Thu 01 Feb 2024 13:00:30 +0000
Manifest next update: Fri 02 Feb 2024 13:00:30 +0000
Files and hashes: 1: 1nSvl-7USr-_pNAi_3Xwd86qQOE.crl (hash: qpUn/yDo1NFZzTLggLm7QtyvEQW8eKKFuXBJDaPu+/0=)
2: VBzXmyt77aFmVw6Bc6jYfwVsx_A.roa (hash: UBrj98k1B/+rhAR4mr19NtE2u26U/zi0zfW9C9mbyaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:c1:aa:76:e0:38:ca:d8:f7:31:3c:11:ed:9e:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Validity
Not Before: Feb 1 13:00:30 2024 GMT
Not After : Feb 2 13:00:30 2024 GMT
Subject: CN=fecff8194784857dce6bb03dab9f242df9ea957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:f0:26:10:c2:15:34:54:4b:72:41:0a:fe:
e8:00:fd:8d:50:a8:7b:6a:46:15:c5:ba:1e:84:a7:
2d:37:2a:cb:76:15:07:94:22:30:7c:8a:0d:47:39:
fb:bb:a8:ae:4f:b6:e1:d7:bd:eb:85:df:04:7c:e2:
2c:5b:33:1e:52:b1:c0:e9:55:26:21:c0:44:b6:77:
a4:d1:fe:99:c2:90:33:ff:fd:d9:f1:96:a9:86:0f:
c2:9f:5b:8e:93:a6:e6:93:00:5c:2f:5f:f5:c2:96:
1a:04:5b:43:03:88:cb:2d:0d:eb:2e:91:57:9f:56:
f2:09:17:7a:4f:62:59:32:ed:cd:b3:29:c6:5b:87:
51:8d:5e:96:f8:b3:9a:18:24:be:34:f5:f1:ed:69:
54:1e:26:6f:f0:c3:aa:9a:40:45:97:25:5b:53:74:
ff:b9:ef:ec:e4:05:e0:61:da:fd:dd:9c:81:9d:e5:
1f:bc:c9:e5:d7:92:81:c9:02:c1:8e:bb:ae:11:58:
a5:0e:85:8b:6f:3c:ae:b6:73:69:68:46:63:74:c8:
02:97:5e:95:ed:cd:35:14:71:7d:3d:18:e3:0c:a0:
9e:10:6e:db:b9:5f:f6:b7:a3:a6:74:da:49:5d:85:
a9:1c:2d:ef:86:de:05:74:d5:f2:38:d2:ba:ed:23:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:F8:19:47:84:85:7D:CE:6B:B0:3D:AB:9F:24:2D:F9:EA:95:7C
X509v3 Authority Key Identifier:
keyid:D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:2b:fb:e9:08:b7:32:fe:c6:16:89:fc:89:32:7c:23:ad:
83:15:62:24:05:e0:19:46:f9:75:1e:d1:f3:26:d9:ac:7b:a2:
73:76:63:4a:a9:c7:f9:cc:ad:f9:00:88:d3:97:97:4d:43:21:
09:a5:4d:33:c3:06:d5:f0:b7:7d:e1:36:e6:2d:92:c0:ee:c3:
53:c0:a0:c3:ac:f6:76:d7:74:9e:77:8d:9e:33:0e:6d:7f:bf:
7b:09:66:40:ec:46:d6:0c:94:4f:7b:72:6e:6c:39:07:ef:0c:
a5:8b:47:97:dc:c8:af:24:2b:ea:cb:ad:1a:34:29:ac:c7:d0:
8b:89:57:96:df:57:f7:ff:40:e8:e9:f7:24:d2:d0:1c:90:6c:
42:66:e9:89:b7:ad:ac:d3:90:00:bd:88:8d:e2:5e:e5:ef:21:
4c:ef:db:e1:9f:94:08:88:f2:01:82:3b:23:71:0f:12:89:27:
7a:0a:74:6b:90:5a:17:bb:7c:63:8a:1a:7a:7c:d1:ac:03:97:
e2:d3:d1:69:f6:da:5d:49:3f:60:97:f2:bc:e1:24:37:4b:df:
c9:cd:03:83:26:e2:25:e0:af:52:18:50:70:07:14:c9:58:4b:
6c:88:db:02:e3:46:41:ff:23:7f:43:72:e7:86:2f:ff:28:0c:
66:dd:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:15 2025 by rpki-client