Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: CR+JcdZYFLB7SLcJhgA1BDMrk6x9qBkMdU71esDWbtg=
Subject key identifier: D3:86:33:B7:4F:74:BE:C6:56:F5:86:DC:47:CC:B3:DE:FF:DB:B1:48
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 0194BC3C641153DF03A4D224E9B888E78B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: E9y9mGPT/uotth2ndnWj4qtiTojo7eJ+xfKCwkKp1l0=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:11:53:df:03:a4:d2:24:e9:b8:88:e7:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=d38633b74f74bec656f586dc47ccb3deffdbb148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:09:5c:31:25:c3:35:11:96:ae:a6:e0:ec:
15:5b:21:bf:22:19:1b:ff:98:db:5f:9f:ff:14:fb:
50:0a:a7:fd:17:2c:ba:ff:c4:8b:f1:4e:e2:ad:d5:
38:46:49:1c:d9:13:00:10:d4:ff:a3:f0:b4:6f:56:
5c:e6:f3:be:28:a9:17:75:67:55:9a:68:5a:af:31:
06:89:2d:ce:71:b5:b8:52:ff:33:8f:cf:ef:25:ed:
a9:cb:09:f6:ef:cf:22:a3:8d:aa:1c:91:5f:9e:d8:
30:bd:0c:45:b7:77:9e:39:09:e8:c4:a7:96:cd:5e:
50:76:f0:c9:b6:38:e1:fb:5c:83:e7:32:99:fe:6f:
14:e5:d5:58:fb:9b:59:1b:da:71:e6:5f:f8:33:aa:
3d:d2:40:d6:fb:9e:9b:b2:06:1e:5c:6e:84:a1:01:
db:18:f3:59:db:ce:b8:00:e2:11:bf:09:15:f0:84:
89:36:b6:9b:6c:d8:9c:9a:58:bf:5d:7d:4d:e9:10:
50:f6:0e:9e:d5:7b:5d:f2:c3:95:08:6e:4d:f9:9d:
82:e6:3d:df:c4:b2:e1:18:ac:ae:16:a2:07:a8:f4:
a0:96:c9:1f:c8:42:92:36:fe:d9:70:f5:67:ca:a0:
e6:08:a3:4f:5b:51:06:07:c3:bb:47:9b:c5:1d:6d:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:33:B7:4F:74:BE:C6:56:F5:86:DC:47:CC:B3:DE:FF:DB:B1:48
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:92:40:af:25:6d:9d:65:80:b0:b1:74:9e:c6:8e:18:bc:
b6:10:81:ca:0e:b8:e7:6c:83:81:74:47:45:65:cf:0e:bb:e4:
1d:c6:2c:55:8c:86:a6:39:14:b8:63:68:7b:e2:75:4a:1f:1d:
ee:6b:88:21:a3:7c:72:d7:22:c1:6d:76:95:48:97:5a:42:5b:
b3:b6:ee:50:1f:a5:41:74:e2:7f:ea:ef:ac:a5:bb:54:d8:14:
41:f9:fd:9a:b2:7a:0a:fc:f5:8b:2f:79:4b:47:8d:26:c0:73:
10:f4:2f:f6:33:cb:c6:1b:c9:3d:4d:c8:f5:0c:8b:56:19:d7:
5c:3f:ab:06:c9:29:98:77:c1:66:e9:3c:da:4d:ee:89:4b:f7:
d8:f6:f6:b2:7f:2d:22:4f:6e:4a:42:77:47:90:4b:53:6e:2e:
1f:2e:e3:23:f7:fb:60:46:45:bd:9d:b0:42:b8:a6:aa:3f:f4:
f5:11:fd:aa:ee:3e:43:d6:c4:9c:1b:68:e4:af:cc:3b:02:fa:
72:12:df:5d:c9:b1:63:da:92:2e:a9:8a:9d:15:63:06:49:11:
d7:46:c7:19:76:b3:3c:80:03:0f:78:6b:9a:75:60:b9:02:4d:
e1:ca:27:c2:a4:be:96:2b:03:b4:c6:a7:ab:e2:73:ab:3b:bc:
83:f7:70:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:46 2025 by rpki-client