Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
File: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft (raw, json)
Hash identifier: WP4NK2ORSKgtRgcTo92mliunJqIO+CY1q8wkXGUlsyE=
Subject key identifier: 6F:63:C0:7D:6F:5E:B8:9F:39:74:4B:4E:79:79:11:CE:C3:5C:29:E9
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Certificate issuer: /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial: 01968ADC761809A7A4AB06CC10A8353FB44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
Manifest number: 0F72
Signing time: Thu 01 May 2025 08:00:25 +0000
Manifest this update: Thu 01 May 2025 08:00:25 +0000
Manifest next update: Fri 02 May 2025 08:00:25 +0000
Files and hashes: 1: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl (hash: Ot/n7lmyjE1qjN1rqMVFi0JPE6+k8lKLf4aX63TRnEw=)
2: Ice-tIEUF1Y7bJNvkEWlbR55Vaw.roa (hash: MtUFbwOo7nZHN6qSqL8LtBj2Ae2yCW5yZnsbKZTHysw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:76:18:09:a7:a4:ab:06:cc:10:a8:35:3f:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Validity
Not Before: May 1 08:00:25 2025 GMT
Not After : May 2 08:00:25 2025 GMT
Subject: CN=6f63c07d6f5eb89f39744b4e797911cec35c29e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:e8:16:fa:92:e4:42:cb:e2:2e:94:f0:ff:
1c:9e:6a:ae:1f:f4:e7:5a:d5:9f:14:b0:11:43:37:
c9:d8:1a:93:11:57:db:70:d8:b8:83:f7:e5:5e:cf:
c1:b5:d4:7e:4b:b3:50:bc:4f:b5:ea:db:44:4c:cd:
27:93:c4:3b:c7:c0:3b:84:86:96:e6:8a:c9:cb:d0:
86:32:66:df:34:0c:b9:20:79:a9:d7:22:98:2e:c8:
90:0a:8c:7b:0d:28:65:58:23:b2:86:e2:a8:57:29:
3b:ab:9e:00:77:f9:16:13:7d:23:21:77:b6:46:d0:
48:f2:2f:d8:9c:32:3a:99:46:16:fb:94:a0:f3:04:
94:64:7a:92:34:dd:21:36:8d:e4:a4:19:9b:53:41:
ea:2f:90:f1:18:1e:7e:bf:3d:b7:3a:f4:19:a9:cd:
22:57:f2:6c:24:37:96:d3:ea:4f:21:0c:e3:46:4d:
a0:4e:c4:dd:d1:2c:62:d8:30:1d:d7:26:fb:6c:1e:
7b:39:0c:99:29:33:8c:e8:a3:9c:c9:1c:0e:b2:4e:
19:83:19:ae:fa:7f:d6:4e:0c:ad:ee:c2:41:21:ba:
3f:90:49:5b:29:32:48:e3:5d:f8:40:87:9a:07:f1:
a1:1d:aa:14:e2:7a:9d:93:d5:98:03:ab:52:99:b4:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:C0:7D:6F:5E:B8:9F:39:74:4B:4E:79:79:11:CE:C3:5C:29:E9
X509v3 Authority Key Identifier:
keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:5c:f8:c4:cc:cb:a3:a4:27:bc:c1:53:dd:80:b6:5d:18:
27:ac:79:f7:0c:e5:82:52:85:24:77:e3:15:16:2e:35:27:77:
4a:df:4c:f8:25:6d:58:10:12:d3:3c:a1:6f:08:23:1d:7e:82:
68:48:7c:98:d9:36:2b:f7:28:c2:12:5b:c1:cf:35:42:bd:1f:
5d:01:f8:60:8a:9e:7b:1b:e3:65:15:48:22:7b:c6:62:49:b4:
36:0c:de:60:55:56:1e:18:e7:df:70:c7:1c:36:8f:1e:00:cb:
69:3b:ae:89:70:4e:6a:f9:67:40:44:eb:79:bc:93:cd:cc:41:
5e:31:41:57:34:da:c9:50:2b:a3:09:e1:11:bd:82:e2:4c:c2:
28:42:89:e5:c4:22:84:9c:9a:67:73:3d:10:4f:ec:a1:ce:bb:
fe:6f:3a:e6:13:b2:64:a7:8b:a3:4f:0f:45:02:e8:47:1e:d1:
b0:62:6a:ca:fe:8d:01:15:3d:53:02:43:a6:f4:ca:94:fb:93:
ca:97:fe:c4:7d:f4:c4:37:84:ba:09:c6:12:62:93:dc:e0:b1:
d4:bf:37:b8:ea:da:0f:87:46:7d:08:ee:a1:9b:01:82:06:1c:
da:d2:14:9f:56:3f:64:25:69:68:62:f9:e2:f7:2a:8e:42:d6:
12:03:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:48:18 2025 by rpki-client