Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: mPV1zixB0JK0+L8ac204ZI6eMd690ODHFg+16y4P9o8=
Subject key identifier: 41:43:EE:CA:55:D5:82:FF:0D:F8:3A:FC:73:6E:DB:3D:0A:ED:A7:E3
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 0194BC7326482E6B50B84E9DF9A9430308C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: LbmrxB94zofQAaOXPkMpTlgw06xaCjom7NLIRIqr9lY=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:26:48:2e:6b:50:b8:4e:9d:f9:a9:43:03:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=4143eeca55d582ff0df83afc736edb3d0aeda7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:af:9e:0d:9c:6a:61:6a:ae:96:96:7b:34:
b6:c6:06:34:62:10:69:c2:43:6a:79:fb:5a:9c:65:
c3:b8:ae:0a:1b:55:a7:89:5e:06:1c:be:8c:23:5b:
71:4e:5c:40:28:1b:08:6e:04:50:c3:b7:0a:82:8f:
47:d6:1a:7b:9d:9a:4f:39:cc:ba:02:46:5a:2c:ba:
9e:f7:fc:af:fb:cb:54:0a:ef:86:2a:b1:92:50:61:
6f:1b:39:d2:58:b2:25:14:fc:3e:90:11:58:02:61:
b4:79:6b:50:b8:41:c9:b8:cf:98:c1:e7:19:53:84:
30:da:7e:0d:8b:80:cd:69:81:f4:4c:81:e4:00:2f:
d1:5f:a6:1e:79:d1:c3:be:9c:47:20:41:d8:c8:12:
20:c0:dd:3b:20:3e:a2:b1:7a:99:2e:2f:9e:1f:94:
60:e3:bc:5f:3e:0d:d0:e3:db:85:01:37:39:34:83:
ec:a3:62:67:c4:5f:f8:0a:e2:b0:1a:f5:47:dd:ad:
c7:15:48:bf:c3:93:56:d0:fa:de:e0:7d:07:fb:54:
f3:e4:9c:30:b2:a7:cc:5d:23:2a:f1:97:cb:37:de:
f3:eb:ee:47:a8:86:6a:d4:36:7f:ce:dd:04:87:a1:
8c:2a:31:2a:7c:50:eb:e1:92:9a:d3:c1:5a:bc:ce:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:EE:CA:55:D5:82:FF:0D:F8:3A:FC:73:6E:DB:3D:0A:ED:A7:E3
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:52:38:fd:08:78:cb:50:cd:c2:5d:1e:86:c7:0e:0c:78:b1:
16:60:43:95:5b:02:75:56:3a:28:40:2f:f0:94:73:63:59:a4:
5d:f3:f4:5d:54:ee:7f:d9:6b:33:30:d2:88:95:86:37:4b:cd:
d6:50:44:c2:7a:50:bc:2b:15:6a:2b:b2:0c:64:e3:36:41:5d:
c1:4a:db:7f:e1:fe:2f:c7:88:b2:c7:a5:c2:8c:7c:ea:86:6e:
f3:c3:d3:7b:77:de:48:41:94:bc:62:b1:4c:c8:ac:57:02:4c:
51:78:83:10:7a:e0:2f:0b:79:28:da:1b:0d:b2:0e:18:78:ef:
89:54:e2:f6:da:e2:1e:05:65:43:1e:1c:5e:17:5e:90:e6:77:
7a:5c:87:25:90:9b:eb:d6:f1:f9:51:2a:d3:df:9e:14:82:df:
e2:87:bf:24:38:bd:7b:39:63:0e:3e:d7:d8:8a:48:07:10:a0:
0a:a8:d9:ea:5d:cd:f5:4a:5e:7a:93:16:42:e0:25:85:3f:3a:
55:93:35:c4:22:1c:96:04:91:34:5b:c1:b5:6b:44:10:fa:92:
90:26:86:9f:a2:7d:a8:6e:c8:dc:62:da:c4:fd:98:d4:82:5c:
f9:c3:1b:0a:28:0d:f7:13:dc:62:c4:03:30:e6:7e:f0:89:8e:
22:46:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:41 2025 by rpki-client