Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: w/bpXLVmUUiX9K4NnbHVMzE7bB94iETsCaceUjFG+Js=
Subject key identifier: 15:07:5A:A1:1F:EA:C6:01:C9:AA:70:CC:63:B9:E3:B9:9B:98:1D:05
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 0194BC3C64651FD16B8D3392457CFAA8FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: rbiJjEJhexwp6SP6426hiKTRYQ5izKZG4Oma5+vPR+E=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:65:1f:d1:6b:8d:33:92:45:7c:fa:a8:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=15075aa11feac601c9aa70cc63b9e3b99b981d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:53:cc:34:37:44:54:55:96:d9:d9:0f:26:
13:7e:b2:d6:15:a9:a4:be:68:71:5c:24:c4:20:11:
b4:a2:28:8b:4c:c4:bb:ac:8a:db:96:07:a1:3e:82:
81:19:56:8c:5a:58:b4:e0:a9:65:21:4f:46:fb:e2:
cf:cf:90:65:6a:d7:41:96:a6:d8:d6:13:1e:60:c5:
28:bc:f4:e6:6b:a7:da:2b:e4:9f:05:b4:43:62:98:
93:0e:b7:97:fd:eb:54:df:12:c3:61:7a:b6:87:31:
9f:09:44:2f:a6:b2:cf:58:b6:62:fd:c8:a1:a5:0b:
54:f0:35:5a:0a:3c:15:52:4d:86:9f:c6:ad:32:1c:
c0:a1:13:d3:33:b3:7f:7a:e4:b4:ae:1b:26:e2:35:
4b:59:a6:74:ab:5a:b9:02:7c:18:16:bd:d1:b3:3e:
fb:c0:26:23:50:eb:35:dd:f3:61:fa:fd:72:df:2d:
55:7b:fd:10:91:51:e2:63:55:bb:7f:8e:81:b4:d5:
7f:7e:af:f1:60:34:f2:57:ce:45:2a:86:78:53:6c:
1f:c0:96:96:94:7b:73:c3:29:f9:3e:20:e5:ff:e1:
e8:f2:a1:97:b1:c7:13:95:1d:59:e2:50:55:f4:44:
07:ec:a1:30:b7:12:71:0f:15:8f:ad:55:7e:91:84:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:07:5A:A1:1F:EA:C6:01:C9:AA:70:CC:63:B9:E3:B9:9B:98:1D:05
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fd:d2:27:db:b9:28:41:54:80:6e:db:de:55:a0:92:4f:b8:
f8:60:2f:57:96:80:0d:69:2c:1b:11:a4:26:bc:0f:01:c8:ff:
2c:09:33:be:ea:d5:80:4a:9a:62:95:05:17:ef:6e:92:62:43:
b7:4a:d0:17:5e:97:4f:b0:86:10:ec:d7:d6:5e:dc:24:60:3c:
d3:0d:6a:fd:1a:d6:cf:a5:55:32:00:85:c1:30:cf:d9:96:74:
6c:e2:9e:36:6f:6c:a6:3d:d2:a7:d5:0c:0d:41:38:a8:20:98:
cc:be:95:10:c9:79:69:a7:b5:81:1d:d5:c8:69:56:16:9c:b5:
40:84:78:4b:f9:cd:ad:95:96:04:ad:27:6e:32:53:55:28:48:
49:b0:e9:17:ac:e2:d1:82:a0:9b:e5:04:e3:e1:f9:1f:4e:f4:
ec:a9:ca:f5:69:80:d6:88:d4:74:51:6f:5b:1f:1c:bb:2f:05:
dc:4b:2e:c6:a0:7a:c4:0b:b3:48:31:bb:de:52:23:ff:f2:8d:
51:4d:27:80:27:d5:de:e2:b7:d7:b1:0e:99:97:26:d1:b6:29:
34:1d:e8:cf:63:c8:b8:4a:71:10:0b:38:ac:f9:20:8f:34:4d:
c0:1c:c0:10:65:9e:e1:fe:43:3e:b7:ec:b5:ce:9e:19:46:91:
60:91:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:27 2025 by rpki-client