Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: RFxZ3LdOuFwUluZOQ2OyZhmstzdNRyDsWy60vv75tsk=
Subject key identifier: 47:F0:40:C4:8E:6A:31:2B:2E:57:85:79:4C:50:FF:18:9E:59:AF:27
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0194BCA9D3A2F66A34312CEA251DF9CCD138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: HDDci6QcojNtXJtWZUR+M8ceyn8TgyLLJBCj4EeFMPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:a2:f6:6a:34:31:2c:ea:25:1d:f9:cc:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=47f040c48e6a312b2e5785794c50ff189e59af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:95:b7:c6:5f:af:05:60:57:99:af:bf:ea:
0f:b9:f2:4d:d6:ea:ba:2a:fe:a1:ec:3d:37:52:4c:
51:62:b9:27:02:b8:2d:5d:99:ae:36:f6:8d:73:06:
51:ad:9a:a2:0c:24:7c:fb:c7:d1:e1:ce:86:f3:a1:
74:0b:7f:6d:ff:82:63:81:3f:89:e5:b9:da:38:f2:
96:f3:97:89:23:4c:72:dc:7e:b5:a9:15:31:ef:e9:
18:7f:65:94:46:42:48:e2:96:9c:4a:38:d4:7d:d2:
7b:a8:c3:a7:b6:eb:cd:0b:61:60:30:bf:5d:b4:0b:
35:4d:a2:ac:1b:38:5c:a5:07:e2:e8:35:5d:5d:3a:
78:d7:6a:a8:0e:3d:76:f9:b9:bc:58:b4:2b:10:8f:
03:bb:33:e3:6a:14:9c:c0:df:ca:6a:75:b3:ab:3c:
1c:9f:6e:b5:32:9f:49:3e:4d:7a:9d:47:d2:a6:ba:
dc:6b:c7:2b:ca:cb:29:d2:2c:c2:63:a4:1c:3f:e4:
bd:0b:da:5c:1b:78:07:ff:77:96:52:ea:f0:9e:07:
4a:b4:cd:25:ac:9c:a7:7d:24:f1:28:04:ca:97:43:
0e:7a:86:7c:c6:af:00:7f:6f:ee:2e:5f:bb:bb:99:
40:de:34:33:e3:0e:2b:af:ea:d1:9e:37:43:9f:d2:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:40:C4:8E:6A:31:2B:2E:57:85:79:4C:50:FF:18:9E:59:AF:27
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:97:1a:46:7c:43:75:f5:ef:36:3a:50:96:19:26:ee:c4:
d2:8e:70:da:a3:52:9c:ba:b0:db:27:1d:46:d4:a2:8e:7a:86:
58:88:29:bb:f4:fc:6a:84:33:c5:27:ed:71:ac:4e:67:3c:50:
0c:a4:8f:99:3a:58:b4:d8:e7:9f:ca:9c:ca:41:33:a7:f6:66:
8d:be:2f:ea:90:a9:84:32:22:77:67:93:60:6e:78:57:37:2a:
a2:92:a9:f4:f1:a4:51:a8:f3:38:68:e0:c9:28:fd:fc:d2:dd:
c0:db:33:be:f9:29:da:23:eb:82:b8:0f:8f:50:b5:8b:c1:ed:
23:26:66:c9:32:2f:5e:fc:c2:56:26:a6:f6:59:8f:6f:14:a2:
5d:8c:06:f9:34:1b:cd:07:ae:e7:6b:23:c6:2f:e9:8f:b0:89:
cf:cd:57:ad:ea:8a:c1:3b:e6:36:29:53:9a:9c:58:bc:f1:03:
ba:52:cf:6a:ba:46:64:20:08:ae:44:43:98:36:e3:b4:c1:0b:
71:e4:df:9f:8b:25:7d:36:7e:00:16:32:8e:49:90:d9:4a:53:
bc:66:da:4a:64:04:6a:35:c6:69:64:fb:34:88:f5:a4:4c:d1:
cd:f1:d7:be:e9:32:f9:3e:e2:3d:77:c9:6e:b5:04:db:7c:fa:
75:4a:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:13 2025 by rpki-client