Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: +34aRwF2qBA2UpuVrZfud+nZesHiDGhYDEpXfsY3ruQ=
Subject key identifier: 16:F7:77:83:FB:12:8F:32:EA:9D:BB:A8:B1:AA:4D:B1:03:7A:78:31
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 0194BBCE0E35A5EFEB1D8C4FCCEF0B3AA8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: 2DaQdI3bzksot5egEB4EXt2aPQyAD7GH7vRdLkkOsZc=)
2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:35:a5:ef:eb:1d:8c:4f:cc:ef:0b:3a:a8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=16f77783fb128f32ea9dbba8b1aa4db1037a7831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:41:d2:30:58:bf:9b:d0:51:c6:46:4a:c6:
5e:db:d5:89:a8:84:7f:b2:54:ff:a6:63:e1:b0:34:
de:99:95:75:62:a0:8e:19:ed:5a:46:0b:a4:14:b0:
08:98:b7:65:22:74:70:c6:95:6b:43:74:35:df:15:
e8:a2:a1:b9:df:23:f1:da:9d:0e:5f:ee:25:91:a2:
7c:13:45:dc:df:20:a5:0b:1e:7a:f6:ca:08:0a:a4:
38:42:c7:10:93:b7:af:b1:76:9d:58:be:a8:18:a5:
d3:1e:4a:40:61:0d:74:8d:68:f9:79:92:d4:0e:e1:
b8:f3:55:8f:0e:28:ac:27:24:4a:92:c7:eb:a3:f7:
f5:5d:61:cd:cd:7e:90:95:fe:8f:76:5e:86:2e:2d:
75:9b:59:b4:a3:c2:a4:8a:23:37:59:8c:43:99:b7:
3b:b4:fd:c6:38:4d:85:94:04:be:cb:bc:32:f6:e6:
c2:f5:d7:14:6b:29:a7:dd:69:3f:79:40:5f:24:de:
90:55:a7:5a:75:cb:e8:5d:52:ad:63:2e:9d:84:e5:
7b:20:59:36:47:27:b5:21:51:33:0f:ce:9c:6b:17:
89:eb:2e:b0:3d:ac:a5:88:33:0e:96:74:ba:c4:14:
e7:f7:d2:b9:44:57:ee:ba:d0:f3:8b:2f:16:56:ac:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F7:77:83:FB:12:8F:32:EA:9D:BB:A8:B1:AA:4D:B1:03:7A:78:31
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:95:c3:73:21:a9:76:d1:62:e1:5b:77:49:83:b9:eb:48:
9b:88:d7:2d:8f:89:fe:b1:aa:3f:fa:59:f4:3d:7d:1d:14:0b:
fa:f8:c0:bc:85:48:97:bc:1b:75:bb:4c:73:ea:72:d0:23:67:
1b:36:f9:ae:fc:97:46:42:c2:d3:24:43:72:b3:b1:2e:67:98:
6a:b6:ef:1e:63:49:0a:e3:7d:8b:b6:70:77:dd:e8:8a:c4:16:
fd:46:0e:57:9d:63:92:54:a1:be:5f:53:50:62:80:70:79:44:
40:7d:4a:69:e7:24:04:0e:82:c5:c7:85:6c:a0:63:98:34:60:
a3:5a:41:65:5c:d5:e3:0a:7a:90:3e:e4:14:5b:c7:8b:97:65:
3d:ee:30:4f:b1:91:6f:84:8e:e9:66:cc:fd:eb:cf:0c:11:1d:
ad:25:6e:ad:ee:6f:53:6f:6c:56:dc:28:c7:5e:4b:37:6a:b9:
dc:b1:55:2f:39:a3:a2:6a:1a:9e:e6:d9:66:dd:30:0b:3a:8d:
4b:f6:96:d0:4e:83:d0:8e:64:95:d5:94:5f:89:bf:b2:61:03:
55:b5:7f:6d:38:10:ae:a8:5a:33:79:56:d6:c9:1e:f7:87:f3:
f3:eb:6f:4d:78:02:b0:5f:e8:33:27:00:d1:03:7d:1e:46:08:
e8:ec:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:08 2025 by rpki-client