Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: 9/aLKJEcAiYHRtxOH8rJn544bxfUHV3QhgV70segfiQ=
Subject key identifier: 65:3D:05:52:C7:E7:0C:14:65:6B:0B:1C:7D:27:38:EE:56:19:DA:03
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 0194BCE0AEC1804FE52E2B846D7FB7F5767D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: qxalbKDm+padLy5C8hj2WG83BbojcD6bD2TpCN1se28=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:c1:80:4f:e5:2e:2b:84:6d:7f:b7:f5:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=653d0552c7e70c14656b0b1c7d2738ee5619da03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:ad:fc:a8:08:a0:4c:06:d4:0d:e9:a8:10:
24:b7:2b:01:1e:9a:28:ed:42:e9:12:4f:8f:c6:71:
d6:d7:33:2b:34:79:69:a3:50:4f:13:9a:ca:b3:e8:
0e:5c:bc:02:80:6a:91:34:90:06:d0:01:8d:e9:18:
f4:72:0e:73:e5:e7:b3:1f:c1:ca:8d:ba:41:1a:80:
28:40:25:46:17:78:f1:a0:c5:46:cf:81:54:1e:79:
ce:81:29:94:10:6f:fb:e7:ce:7d:ab:38:37:da:55:
19:a1:e2:c9:62:52:d3:c8:ac:16:70:05:a7:de:17:
7a:2c:5e:10:88:1e:31:23:9b:3f:02:34:1e:e3:21:
9d:7f:a7:3c:7b:2e:ff:e1:90:d6:16:8f:3a:49:1d:
94:39:b5:9a:a5:54:a9:59:9d:f5:be:89:99:e9:28:
bb:51:90:13:c8:2d:2b:e0:18:8b:13:94:12:76:fd:
fa:71:a8:18:04:13:21:6b:3d:e6:47:57:49:0e:f9:
01:cc:5d:c4:40:84:60:b7:ab:e7:3b:d5:00:e3:16:
ce:1d:61:1a:7c:2f:66:60:f5:fc:76:e4:69:9a:17:
14:e8:60:4a:9d:c4:d8:a2:cb:b7:e5:cc:ea:3e:7d:
36:29:a5:10:5a:8d:09:7d:78:3d:27:2e:72:7e:4d:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:05:52:C7:E7:0C:14:65:6B:0B:1C:7D:27:38:EE:56:19:DA:03
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:6b:b1:2c:9c:17:0e:d1:ff:31:53:a8:e4:86:9b:f0:d1:
70:46:c8:ff:65:c7:bb:3e:0b:30:11:70:05:2b:59:77:64:25:
ce:2a:9e:98:5b:01:8b:9a:dd:fe:9e:fb:4b:67:d1:85:82:3e:
52:c1:1c:bf:54:97:ac:4d:09:c3:df:d7:bb:7a:1d:69:9e:9d:
30:99:98:3b:d7:32:7b:84:af:05:31:a8:15:e5:9a:8e:14:f7:
1e:45:35:b4:5a:b4:d0:67:f2:45:a4:a2:89:fd:49:ef:85:fb:
40:b2:f7:f9:f0:a7:1c:21:c4:55:21:ca:11:d1:39:26:17:3f:
d9:2d:a6:ac:38:b3:df:8e:a0:95:d8:12:fc:58:5a:5c:a3:cd:
89:d8:a3:48:7c:f1:2a:30:44:29:71:40:62:be:c8:71:ca:1d:
3c:a2:ee:1c:c3:60:b3:13:97:28:bb:ff:36:38:04:d3:8c:a4:
8e:ad:8d:de:ae:c6:9f:50:be:7f:e6:8a:47:31:61:5f:58:06:
ce:4b:c6:33:f7:71:0f:72:fc:4e:16:9a:cc:82:f2:06:c2:59:
cf:5c:f8:a6:fd:51:be:3b:0e:03:a3:a2:65:ca:ad:9b:c8:78:
98:3e:f2:f9:2a:80:48:2a:33:90:71:2c:2b:50:94:73:27:02:
32:54:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:45 2025 by rpki-client