Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: 5uJ3b/ZcZhLRu+Zglxxa7pDUWL2OhJq+DD6dOxZGadY=
Subject key identifier: 25:21:57:76:4A:78:A0:DE:C7:55:7A:B8:BA:AA:A7:FD:C2:30:8E:6E
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 0194BC04DFC7A0BD3614C0635B8066CB1A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: Iayn8MF5VjMHwFtF9LxGzLOJGSGmmwmz6rqybUfvhbo=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:c7:a0:bd:36:14:c0:63:5b:80:66:cb:1a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=252157764a78a0dec7557ab8baaaa7fdc2308e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:fc:19:bb:db:88:7f:f5:4e:4f:e1:3e:cf:
41:9c:90:c0:92:b2:a0:94:91:41:8e:5a:40:ba:9a:
85:ff:d9:0c:af:95:fb:32:ed:2b:63:a6:04:c9:4b:
40:a5:2c:51:eb:d1:1b:1c:3b:31:61:f5:a0:35:20:
93:5a:a2:01:4c:0f:e2:fa:6e:f1:d5:df:f8:d4:c4:
5d:b2:f2:e2:59:51:f8:13:00:6e:a2:d5:55:c3:28:
32:02:2e:17:6b:d6:34:57:fe:d7:4f:9f:6c:eb:44:
d6:a1:85:e0:a4:9c:de:5d:69:fd:5c:a6:35:4a:b8:
d1:93:cc:0b:d3:eb:f3:cd:97:d3:07:27:cc:92:d5:
c7:6b:75:9e:62:32:0f:c7:c0:87:95:26:6a:ec:68:
c3:cc:56:ad:c9:d1:2b:5d:41:67:56:ca:be:6a:95:
e1:f6:3f:2f:1a:f4:90:51:41:6f:4e:93:41:3e:a8:
60:1d:16:1d:14:c2:f8:6c:86:47:34:1d:aa:6c:e4:
f3:a6:67:e8:78:2d:74:f3:bf:b0:3b:52:96:ad:92:
b5:be:b0:08:6c:38:50:39:2f:b1:c6:f8:cf:9d:dc:
fa:81:4b:94:cf:ab:7d:2a:cb:17:4e:1c:19:32:2e:
51:2a:75:48:8b:d5:2f:c7:89:35:2e:b7:60:29:09:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:57:76:4A:78:A0:DE:C7:55:7A:B8:BA:AA:A7:FD:C2:30:8E:6E
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:83:1a:b3:ef:cd:ce:04:bd:29:1f:88:82:ac:30:ac:d1:ec:
54:f8:b8:18:e3:17:19:f9:a5:1b:cf:96:90:fb:00:f5:97:61:
4b:8d:c0:fc:0f:0c:bc:3d:b4:89:23:6f:c2:80:4a:94:51:eb:
98:72:ad:81:a3:0c:c5:5b:15:78:61:ee:f6:92:f2:7e:0b:f4:
58:48:b7:9b:00:5f:56:c5:db:41:a3:d1:ee:dc:0c:5a:2d:02:
99:95:05:45:bc:64:c7:25:75:b1:44:d5:1a:aa:de:54:0f:11:
9e:2d:42:ec:e1:3d:6f:d8:f5:ec:48:66:29:a3:36:d2:aa:67:
f1:fd:37:89:46:66:c7:bd:78:69:44:52:4d:c7:7b:1b:0c:0a:
32:b7:c2:d6:a1:ca:dc:ff:8c:89:f2:e4:b5:fa:07:59:4a:d0:
33:59:25:77:d3:bf:7d:81:ad:b1:49:96:4c:da:3f:e5:9b:84:
b7:e9:c0:3f:da:32:f5:b2:d5:8f:4c:bb:ea:b0:10:4f:7e:b6:
19:49:f6:72:75:d1:62:06:08:68:b3:a9:8f:ba:c7:f0:3a:76:
a2:c2:f7:17:ba:3e:f3:8e:f6:d1:f6:9f:5e:7b:76:f1:33:12:
f1:96:1c:01:27:7b:79:da:60:2a:63:0d:14:fe:b1:8e:f3:c7:
cc:84:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:28 2025 by rpki-client