Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: ePIk+9hyYgGUI4ZgXEAQ/2Tj45Q2e0yfsnpJMI9Pumw=
Subject key identifier: 18:70:45:33:9A:31:EC:7F:DD:03:1F:DC:59:B3:26:04:55:02:EE:C4
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 0194BD175B19AFE67ACAE7346A1E8E2DB9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 13FB
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: Yaq/E1fAZV3mXKdQWb58E3iPS1YXvDVRoqVNr8ZztfY=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5b:19:af:e6:7a:ca:e7:34:6a:1e:8e:2d:b9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=187045339a31ec7fdd031fdc59b326045502eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:10:97:7d:1e:02:c5:ab:c4:ce:0e:cd:b4:
3e:80:4a:84:b0:9c:38:59:33:6e:66:8f:7a:f7:45:
91:7d:25:33:e8:f2:e0:fd:6f:2f:1c:bb:06:bb:da:
9c:eb:f9:f4:4b:3e:b1:ff:9d:9b:f6:90:19:df:82:
5d:ab:07:59:35:fb:f7:4a:ee:e3:44:5b:11:cc:85:
76:3c:c1:10:a0:4c:f4:ca:8d:26:4f:7b:11:41:4e:
8c:c5:60:78:2b:10:36:27:96:24:19:3f:c7:17:19:
6b:d5:fb:6e:e5:2a:75:7b:fb:71:30:c0:20:0e:22:
45:75:34:99:53:f9:26:34:67:7e:3d:ac:9a:36:79:
c3:8a:bc:88:eb:93:52:64:e6:e3:ab:89:32:66:c8:
f9:1e:b1:cf:78:49:cb:a6:94:47:b2:79:8f:ae:be:
5b:e1:4e:13:92:13:ed:bc:53:82:48:3a:d2:77:b8:
5d:16:49:23:43:0a:39:f9:79:f3:91:2a:26:fd:b6:
b0:4c:ce:91:3b:aa:46:02:55:fa:5e:eb:ec:36:4e:
a5:40:f4:1a:30:6b:53:b7:5c:46:a6:0f:28:19:9c:
2a:14:09:ad:21:cf:a2:b7:42:0d:d6:0a:bd:45:fc:
61:40:cc:3b:46:08:8a:9b:9e:cf:59:3d:d6:06:88:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:45:33:9A:31:EC:7F:DD:03:1F:DC:59:B3:26:04:55:02:EE:C4
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:2e:d3:96:49:4a:25:f4:1d:52:41:26:3b:e9:51:c1:c7:
21:58:c6:9d:4d:80:43:5f:bc:31:25:98:f2:8e:ba:60:b1:ea:
77:49:94:10:f1:c3:96:e7:97:52:94:e8:2f:c5:68:9d:a7:5c:
0d:45:96:29:eb:b5:bf:25:94:2c:78:51:da:b0:50:9c:33:75:
d7:3b:aa:ac:48:5a:9a:26:0d:c3:75:91:68:4b:1c:3d:c8:73:
bb:8b:7c:a2:c0:10:d9:f9:ac:7d:8e:1c:f2:84:d6:dd:94:33:
88:5b:e3:be:59:a8:c3:47:b5:0c:e1:41:ca:b2:1e:0a:a8:fb:
7d:be:a3:ae:1c:fd:7c:0a:d6:b2:0a:18:5f:9c:bb:ec:a4:ee:
5f:b8:57:a1:f7:d1:a4:f4:09:2d:67:47:03:32:13:26:47:3a:
de:16:f9:c3:3a:86:59:28:dd:90:64:cc:5b:33:0c:09:05:2d:
4b:0b:31:19:97:d5:fa:87:ff:e6:3f:34:a3:5b:79:44:c8:d7:
9f:ce:a9:5b:24:83:0d:17:f8:a2:db:20:7a:0c:87:e7:e6:a0:
67:75:10:e9:a3:43:cc:c8:0e:21:c5:0b:fb:eb:aa:63:ba:92:
d8:19:52:8a:3c:44:8b:dc:db:1f:42:8a:c4:b7:1d:02:fe:bb:
70:e4:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:30 2025 by rpki-client