Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: NFh2uMT/plgpNiZJLKP9IreubBH2YKHxSKQRaqqxD0U=
Subject key identifier: 74:B6:8E:69:CC:B8:F2:9A:CC:45:C3:2B:A6:8E:12:F3:63:88:98:AD
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 0194BD4E88084F5BF21CC934B772DF70FA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: 8J/WXkguWrBjQcv+Iys4C3aLzDE06pT2nBQPdl8f5AA=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:08:4f:5b:f2:1c:c9:34:b7:72:df:70:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=74b68e69ccb8f29acc45c32ba68e12f3638898ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:f8:ab:be:de:46:28:ca:38:28:2a:d7:47:
4d:5a:ad:d6:22:04:1f:03:bd:40:02:cd:0d:30:b7:
77:d0:19:d4:83:08:b3:8c:e1:64:31:17:a7:ab:41:
b0:d3:6e:8a:b3:5d:c4:72:f7:82:ba:5f:57:37:28:
a1:d8:2a:90:df:5b:f6:9c:81:9c:51:8e:f1:0b:b9:
ba:ef:a9:a3:ed:5a:a7:9d:0a:4f:b3:92:17:0f:be:
af:d7:53:57:2d:da:35:bc:32:e9:d9:2a:ec:e3:13:
96:d3:48:0b:6e:a9:c0:d2:28:8e:76:71:2f:0c:11:
bf:b6:35:7a:df:f4:16:d9:3f:f6:6d:45:91:01:32:
9a:70:29:50:67:9e:64:3c:96:d6:63:28:ff:ce:3e:
94:f6:81:50:82:29:cd:d2:62:25:51:8e:2f:ef:29:
ec:a9:42:b4:d7:08:86:6a:55:b1:e6:b0:ee:42:6a:
1f:35:c5:cd:91:e3:39:b9:29:13:09:f4:37:87:44:
08:b7:0b:3f:44:f6:74:f3:3d:69:c8:43:35:ea:c8:
01:55:e3:7c:eb:98:c9:16:03:a4:c2:d2:dd:97:e9:
ed:c2:4a:2b:5a:c2:bc:3d:98:02:4f:67:72:e4:bc:
50:75:53:e3:fc:f3:89:78:f9:37:39:20:d6:ac:48:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:8E:69:CC:B8:F2:9A:CC:45:C3:2B:A6:8E:12:F3:63:88:98:AD
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fa:9d:96:f8:80:ac:62:6a:45:93:f9:41:ec:dd:06:76:05:
3a:a4:97:76:4c:59:8e:db:3b:d8:c9:32:ac:9c:d5:27:d6:2c:
1c:1c:88:31:29:5c:69:27:4d:8c:b8:e8:03:ef:d9:9c:f1:92:
74:75:38:90:ff:4e:c9:95:e7:90:4b:a4:c2:71:da:7a:7d:7c:
60:c6:c8:94:d9:16:51:5d:90:54:c7:1b:57:aa:68:64:78:f2:
a1:a5:97:6e:64:8e:5a:26:af:3a:ab:e8:30:57:85:23:1d:f6:
67:51:28:c2:f9:62:ba:40:8f:ee:c0:64:f2:7c:4d:58:71:ea:
a8:e9:f8:80:07:83:2d:12:67:0f:c1:0b:06:8b:e3:7f:c8:5a:
f2:a1:50:ca:9e:05:aa:bf:58:ee:5b:b3:d3:44:54:a7:46:1d:
5b:0f:d5:92:27:a6:34:77:42:6e:50:06:78:f7:74:a3:e9:80:
80:f4:08:c2:33:7e:cb:ec:94:01:97:86:17:ad:41:d4:8f:49:
98:7f:d3:1a:a0:fc:06:31:11:65:cb:08:8f:72:e5:93:62:7e:
28:2b:ef:98:8d:3e:5c:99:43:eb:7a:e7:6e:f8:4d:6f:85:b6:
df:41:47:36:15:af:2b:19:af:39:5d:aa:1c:51:ff:98:f0:8a:
2e:96:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:56 2025 by rpki-client