Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier: DNR3dI1Qc9qe1umePPB5ifw28OJFjsNFBte1+CsYt2U=
Subject key identifier: 17:B3:07:CD:C4:AE:FE:42:F5:3A:DB:A5:52:50:56:A5:C1:39:25:50
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial: 0194BC72E1317E25B758C2917FB9A1A129D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: RfZbZP1mH/lCuZIDIl2o0oFZiUnh8sJK27PIEpHbK5A=)
2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:31:7e:25:b7:58:c2:91:7f:b9:a1:a1:29:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=17b307cdc4aefe42f53adba5525056a5c1392550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:61:75:70:8e:68:cf:8f:b6:ec:cb:77:4e:9c:
b8:3a:8c:2a:ca:9d:07:0e:a4:46:a4:ee:06:3b:9f:
37:e8:e5:29:4f:cd:89:63:ea:41:59:5c:04:e8:fe:
81:7c:56:8e:9e:a6:61:9f:31:35:9c:f3:dd:0f:13:
d5:8d:3e:03:77:69:71:8b:08:eb:54:fc:46:9c:37:
e3:32:1c:1a:b0:b7:29:44:3e:f8:f9:53:86:48:77:
6c:de:d3:89:ca:12:51:a2:97:4e:60:6a:43:1b:aa:
d1:24:e6:ee:9f:02:90:9e:f5:e4:fb:1a:da:5f:4c:
a1:97:5a:8b:ff:d9:33:73:d0:a4:dd:41:ec:d9:e3:
e9:63:33:4b:8a:ff:1d:86:59:65:ef:f9:f4:df:4f:
1a:d6:9c:c7:11:74:e2:ba:ed:3c:22:e5:20:43:01:
48:d1:0e:e4:4f:5e:e5:5a:5e:15:4e:da:1b:e2:23:
e6:e7:18:49:5b:c3:86:38:96:4c:0d:93:6e:20:0c:
a9:3c:3e:63:d8:85:c6:a9:bf:25:f0:47:77:6b:04:
b0:81:d1:fb:5e:af:a5:29:13:22:a6:bd:45:03:61:
83:44:c9:7f:23:8f:20:14:d8:70:69:0b:62:55:58:
f2:e2:02:b5:8d:c3:80:f4:7d:92:24:4b:32:71:95:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:07:CD:C4:AE:FE:42:F5:3A:DB:A5:52:50:56:A5:C1:39:25:50
X509v3 Authority Key Identifier:
keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f8:77:b7:18:dd:74:b2:5d:7c:32:e9:41:09:3b:a5:71:48:
c7:a3:dd:59:87:32:1d:ae:c9:c4:be:aa:33:ff:0b:ce:20:64:
10:82:2c:13:b9:3d:8b:65:e1:8b:3a:9b:50:8f:ae:3e:a3:a8:
6d:01:a6:30:82:85:e8:e3:35:d7:1e:be:92:13:f0:8d:b2:57:
e8:fc:bf:66:a9:36:52:3e:71:c0:10:07:04:da:01:ef:b2:0c:
51:8d:e8:66:87:90:0b:98:85:19:f6:72:e7:05:14:ed:8c:98:
29:ab:9f:87:22:e0:8f:ce:a2:f8:32:31:14:99:5b:56:90:5c:
e4:a8:df:03:da:62:40:a1:a6:75:d3:49:32:1c:f7:67:c7:53:
43:7f:e3:44:dd:96:cc:d1:69:ab:58:94:dc:25:5d:3d:fa:27:
86:c9:d7:6c:ee:ab:3f:79:be:08:e7:1b:e5:93:17:12:43:ea:
b4:cf:31:02:5a:42:4a:2c:0d:ed:ab:96:ff:d4:16:4b:f4:6c:
85:c8:03:50:44:59:fd:81:af:e2:5d:51:df:c2:6b:4b:3c:fe:
50:f5:3b:ef:d4:c7:76:8c:66:3b:40:04:a4:7c:4b:89:0c:c6:
ad:18:50:b2:8a:03:c3:ea:cb:45:8f:4a:3b:58:cc:c4:56:64:
7b:15:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:40:44 2025 by rpki-client