Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier: 8eZXjpo5/GhlUg5HQ2zyVHhc6fo9I0ZnKthWEntvh4U=
Subject key identifier: 41:67:88:A0:87:80:A8:29:55:E4:B6:76:CC:4D:C0:02:F1:E1:DA:3D
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0194BCE0818335F9EB85068EDF5132157F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: wf/oLlKFfv2SxpgFiPbIkcF2YDdtpqmkCX8k2pTS+1M=)
2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:81:83:35:f9:eb:85:06:8e:df:51:32:15:7f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=416788a08780a82955e4b676cc4dc002f1e1da3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:c0:9f:60:d3:a5:64:7b:67:1f:a3:f6:ad:
c2:40:00:ed:30:4c:90:53:d4:ea:91:eb:2c:d4:6e:
b6:e1:3a:1e:ac:f3:53:2f:0f:57:e6:51:5a:6e:59:
c7:f1:f7:ce:18:bf:8e:e3:3a:8d:d9:1d:aa:66:3f:
03:12:22:60:34:13:9e:c1:17:06:67:21:ed:de:62:
09:20:55:ac:8b:9e:ac:26:4c:99:06:1e:c0:c6:d5:
d5:67:4f:45:c4:f9:23:57:2f:60:ad:03:21:54:54:
66:46:61:2e:f3:a3:65:b4:a4:cb:a1:cc:7c:89:56:
fc:e9:07:d3:71:dc:ff:f4:68:12:a6:de:d3:72:32:
f7:f4:f9:7c:c7:5e:96:34:80:b3:30:5e:53:3e:3b:
d9:00:44:4e:c6:5f:64:f7:80:e9:f7:18:5c:8c:43:
1f:bd:22:64:da:17:b9:ef:11:5b:70:ed:ef:28:56:
bf:70:6e:59:92:f5:05:81:47:ae:f1:a1:b8:06:79:
49:83:03:59:68:0b:49:b5:0b:e4:3c:94:c8:3b:c7:
91:1c:fe:7c:16:52:8c:ba:c5:23:8a:81:d0:9f:02:
1f:14:2a:d9:fa:c5:22:e8:b0:99:cf:a8:2a:77:6a:
4f:72:c4:65:38:db:9f:aa:92:cf:0e:28:a5:ff:f1:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:88:A0:87:80:A8:29:55:E4:B6:76:CC:4D:C0:02:F1:E1:DA:3D
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:78:1e:aa:0f:71:05:ec:19:37:25:b7:01:91:0b:c9:7e:
12:2f:7d:4e:a5:b0:78:1a:28:75:ce:61:80:73:33:d0:0d:02:
27:ba:ef:87:75:93:29:20:e1:4a:42:ad:df:c0:15:83:97:f3:
38:c5:6c:01:81:a0:9b:01:b5:bb:02:78:e4:ae:86:e9:b9:5d:
c8:c7:94:c5:83:5b:73:e6:59:cf:75:83:67:38:0d:61:fd:77:
7b:03:17:df:5d:29:cc:c1:18:23:1b:32:76:7e:eb:d4:5e:0f:
b5:fc:dc:bb:7c:24:de:a4:0e:0c:0d:0f:9f:88:44:85:19:3d:
4f:6c:51:f5:cb:9f:1d:60:28:2a:df:6e:0b:1e:12:2b:e2:5b:
fa:38:54:e1:22:4e:2d:da:45:fa:d8:8b:70:10:e5:bd:f2:2b:
7c:07:7c:c8:b4:9e:c7:87:e9:63:d5:bc:36:6d:9a:3d:59:ac:
53:f3:e7:b7:86:90:64:8f:6e:8d:9b:70:da:28:ad:9f:42:30:
3d:6a:4e:45:97:f2:21:65:f8:57:8e:83:ed:f4:d3:56:86:06:
a4:49:01:07:eb:b8:c9:fd:ff:74:ec:15:77:36:35:6b:f0:80:
92:3f:84:3d:a5:09:bf:d4:f7:5a:37:50:bc:a2:af:ee:66:1c:
7c:bf:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:48:05 2025 by rpki-client