Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: oALjLBZe2SPPjYSerwaENF6gZfMuewzkS7JiJFxhIFA=
Subject key identifier: 5A:AC:4F:7E:F2:58:99:9D:98:5B:64:BF:3F:94:35:55:B2:A9:28:68
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 0194BBCE229F6D302A376F75438464609DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: We+MpeKVw1zK8dVQ5CtzngmzO5y4c7oRnhykQy8/uaI=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:9f:6d:30:2a:37:6f:75:43:84:64:60:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=5aac4f7ef258999d985b64bf3f943555b2a92868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:b1:c7:39:61:03:63:7e:96:50:9e:ae:03:
1b:6a:e8:cc:c2:a4:2f:e7:84:a6:39:67:30:b0:9a:
5b:04:c7:a5:fc:70:eb:15:d6:a9:bf:aa:13:27:9f:
a9:12:e0:aa:d2:50:48:6a:45:8f:f8:7d:68:52:ff:
1b:c7:f7:7c:c7:79:52:58:2c:95:86:76:29:44:8c:
ba:70:f9:3e:2c:6d:56:89:ef:fb:b6:37:92:52:09:
b0:58:f0:4e:2a:a1:33:5b:72:76:53:46:cb:80:b2:
14:ec:5c:4b:af:53:b5:0c:cd:63:18:ce:8c:f2:f9:
2e:e9:7c:0d:ac:53:c4:d9:7f:65:9f:58:47:1f:63:
a2:20:60:44:6c:f7:5f:02:91:3e:c3:bc:b5:81:a1:
ec:e0:51:73:4c:23:5f:0e:55:bc:56:62:c9:31:e9:
b3:88:e2:c7:03:28:bd:23:1a:db:e8:b9:f5:90:68:
d8:63:bc:07:b8:f4:41:19:d6:00:64:90:8c:ea:9a:
7e:95:ed:1e:e9:b0:39:ba:54:44:3d:82:45:f6:f0:
0a:4d:7c:0b:ef:7f:bd:40:96:80:98:dd:db:02:f1:
a0:ef:bb:9d:2a:2b:2f:49:d4:2a:e8:fa:4b:f8:6d:
c4:46:42:d8:29:ae:22:64:e9:4a:c9:3b:ba:05:a2:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:4F:7E:F2:58:99:9D:98:5B:64:BF:3F:94:35:55:B2:A9:28:68
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4c:57:20:1f:6b:c6:b3:1a:03:d6:5b:1d:9a:1d:cb:c0:f1:
d2:18:9d:f8:a9:66:ea:6d:14:f4:8c:7a:30:cf:b7:d2:d8:ea:
60:50:65:76:f4:0d:f5:34:33:71:cc:b6:1b:62:90:1e:de:af:
a5:b1:20:64:d7:43:b8:8c:a4:c7:0c:f1:25:09:11:19:16:d9:
c4:7d:8e:82:df:a7:a9:43:03:74:f8:ed:ab:ce:5b:ae:08:ba:
a0:bd:74:be:3b:4d:2a:25:85:7d:c1:f0:53:53:c9:10:27:85:
60:71:c2:38:d2:85:da:23:51:db:4b:50:ca:fa:05:6b:17:a7:
69:9c:22:29:8d:0c:57:46:00:d1:37:17:e7:b2:74:c4:cb:4d:
da:ee:1b:9d:18:86:0b:03:f0:53:d6:c7:37:a6:01:dc:05:22:
3d:05:70:32:ba:63:08:22:63:b3:c0:a6:be:a4:c7:bd:51:ae:
29:13:95:5c:4a:60:f1:bd:f6:62:a3:e5:9e:14:ef:cb:b4:e6:
6f:07:1c:1a:9b:14:b5:24:f8:b5:7c:af:ab:2c:04:48:5e:88:
af:9a:da:24:98:16:06:67:83:cb:19:c5:4a:15:aa:9c:80:cd:
ce:91:6f:ec:ad:1a:7f:10:85:9f:00:ab:e5:a6:bf:53:58:03:
0e:3f:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:13 2025 by rpki-client