Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: +1DW2n4936L6UDgqs+4jT8sMK5/c/IpfARENvrscOF0=
Subject key identifier: 7F:38:EC:D3:12:6D:AE:90:FE:AA:CD:F3:FC:C8:9E:63:D2:AA:6A:65
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 0194BC3CA44F2A05803B7C31B091B90FB9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: Lp1ljtSNNv/1rhmTRti28JS+MNStmzZTUWa6C8sMgLk=)
2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:4f:2a:05:80:3b:7c:31:b0:91:b9:0f:b9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=7f38ecd3126dae90feaacdf3fcc89e63d2aa6a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:ad:5a:0b:29:08:75:d9:43:b2:3f:4d:ec:
35:e6:f3:e0:f4:78:51:4c:47:86:2b:ad:81:c5:fe:
0f:14:0f:e2:c5:e0:9c:1e:82:0a:33:48:e5:05:8d:
88:1c:fa:f3:3b:ea:12:e8:3f:29:64:ab:72:63:ff:
88:7e:c0:b0:ec:d7:8c:5e:89:ed:7f:c4:2d:ba:aa:
b4:94:ca:07:ff:9d:af:78:fb:9c:8c:0d:37:f6:74:
1d:d9:45:cb:c2:d8:5c:ee:c8:f5:4d:ed:2e:26:6e:
5d:49:6c:58:55:60:7d:96:4d:21:fc:ae:58:2c:77:
a8:6c:25:6b:44:7b:38:e0:1b:99:45:ad:5f:29:f3:
5f:35:46:ed:54:65:bb:5e:d6:af:c4:b1:1c:b7:19:
c8:77:fc:0d:57:d5:05:96:9d:6c:ee:a6:be:0d:f6:
c5:d0:3d:72:ba:50:2e:b4:aa:9f:9c:f3:95:90:5b:
76:80:34:c3:6e:67:61:a5:c1:2b:9e:72:59:df:d0:
6c:7a:84:43:f7:47:6b:6e:a6:56:ab:a5:8f:84:75:
8f:61:1e:73:0e:70:ef:f4:7b:8e:fd:57:89:00:db:
c0:4b:3a:a3:44:72:2b:10:fd:65:36:90:cf:d7:5d:
f1:5e:e7:3c:e6:f4:96:08:9a:92:20:16:0c:e3:7a:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:EC:D3:12:6D:AE:90:FE:AA:CD:F3:FC:C8:9E:63:D2:AA:6A:65
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:22:22:66:1e:bd:4f:f8:55:04:45:8d:68:b4:a3:56:a4:
75:d7:ed:0c:18:63:b4:94:b3:19:78:16:78:61:c5:c6:a0:ad:
bf:43:9e:56:f3:f9:60:57:88:b3:0f:39:ed:87:b9:eb:b4:b0:
09:da:7a:1a:33:69:40:9d:ed:80:f8:4a:a2:22:36:52:14:2a:
57:c1:f5:fb:c6:23:5d:29:8c:43:98:c3:b8:61:20:0a:af:eb:
a0:35:c4:30:ac:af:e0:2b:c2:be:d0:b9:33:ec:06:67:4d:30:
2a:35:f4:11:bb:b2:f3:ae:34:7c:21:da:06:9f:ba:22:86:99:
c4:5d:05:bd:de:ef:d4:41:ac:10:01:cc:a7:16:72:ad:09:aa:
44:ab:22:f9:0b:84:c1:e6:b4:b8:ce:b8:7f:2f:2c:0a:e4:b1:
ed:52:41:91:7a:e6:2a:78:79:32:fa:b2:69:4e:b3:0b:03:df:
bd:dc:7a:78:2e:96:4a:65:53:16:b0:1d:28:a7:a7:9f:10:56:
ff:af:dd:0e:2b:38:da:d8:69:46:1a:1a:75:b5:09:13:c9:58:
b3:e7:8f:6e:6b:cf:f2:80:8e:e8:12:ed:b5:f8:3f:a6:57:1e:
2c:df:7c:e8:d8:90:f4:1c:18:b1:cd:99:d2:ae:18:6b:d8:de:
7c:d2:cb:69
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8PKRPKgWAO3wxsJG5D7nIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjc5NmQ5ODBmYTYwZmUyNTE0ZmNlNjI2NDZmNDVkMTJj
OTUxNjUwHhcNMjUwMTMxMTIwMTE4WhcNMjUwMjAxMTIwMTE4WjAzMTEwLwYDVQQD
Eyg3ZjM4ZWNkMzEyNmRhZTkwZmVhYWNkZjNmY2M4OWU2M2QyYWE2YTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+tWgspCHXZQ7I/Tew15vPg9HhR
TEeGK62Bxf4PFA/ixeCcHoIKM0jlBY2IHPrzO+oS6D8pZKtyY/+IfsCw7NeMXont
f8Qtuqq0lMoH/52vePucjA039nQd2UXLwthc7sj1Te0uJm5dSWxYVWB9lk0h/K5Y
LHeobCVrRHs44BuZRa1fKfNfNUbtVGW7XtavxLEctxnId/wNV9UFlp1s7qa+DfbF
0D1yulAutKqfnPOVkFt2gDTDbmdhpcErnnJZ39BseoRD90drbqZWq6WPhHWPYR5z
DnDv9HuO/VeJANvASzqjRHIrEP1lNpDP113xXuc85vSWCJqSIBYM43pdxwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFH847NMSba6Q/qrN8/zInmPSqmplMB8GA1UdIwQY
MBaAFPq3ltmA+mD+JRT85iZG9F0SyVFlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yZVcyWUQ2WVA0bEZQem1Ka2IwWFJMSlVXVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTdmODllLTgyYjUtNDQyYi1iNjcy
LTVkMTkyZmJmY2IwYi8xLzEtcmVXMllENllQNGxGUHptSmtiMFhSTEpVV1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE4Lzk3Zjg5ZS04MmI1LTQ0MmItYjY3Mi01ZDE5MmZiZmNi
MGIvMS8xLXJlVzJZRDZZUDRsRlB6bUprYjBYUkxKVVdVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO70i
ImYevU/4VQRFjWi0o1akddftDBhjtJSzGXgWeGHFxqCtv0OeVvP5YFeIsw857Ye5
67SwCdp6GjNpQJ3tgPhKoiI2UhQqV8H1+8YjXSmMQ5jDuGEgCq/roDXEMKyv4CvC
vtC5M+wGZ00wKjX0Ebuy8640fCHaBp+6IoaZxF0Fvd7v1EGsEAHMpxZyrQmqRKsi
+QuEwea0uM64fy8sCuSx7VJBkXrmKnh5MvqyaU6zCwPfvdx6eC6WSmVTFrAdKKen
nxBW/6/dDis42thpRhoadbUJE8lYs+ePbmvP8oCO6BLttfg/plceLN986NiQ9BwY
sc2Z0q4Ya9jefNLLaQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:50 2025 by rpki-client