Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: IaaMUqQ2s9EnOg+wk/tgNyG+FkjpcenaKJDcLflcIbY=
Subject key identifier: 43:08:84:C3:E4:40:89:D8:48:76:D7:B7:65:FD:0A:5A:AB:8D:F3:BA
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 0194BC3C923D68798130C96511B5D04FB994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0618
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: BIKoJXXLLNIPeNZOk/rkh+V4xqX5+3/rlwJQiQcY7+o=)
2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:3d:68:79:81:30:c9:65:11:b5:d0:4f:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=430884c3e44089d84876d7b765fd0a5aab8df3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:56:a9:2d:b0:dd:f3:8b:3f:e0:00:1d:ee:
85:79:61:a5:48:ba:2c:9d:88:d9:95:d0:61:cb:5d:
b3:bf:45:b0:c7:d0:67:a9:92:a1:5d:17:bd:fc:e9:
73:a3:c7:06:e8:73:a7:ac:f5:f1:83:cd:e7:28:b3:
82:82:5b:16:f5:c1:2e:4f:66:51:dc:bc:0f:c2:0c:
6e:9e:1a:47:bf:d4:d6:20:a9:81:ff:75:b5:42:fe:
de:13:29:c6:ba:fd:ab:e7:c5:fa:4f:e4:9a:3b:75:
0d:c5:6e:3b:1e:80:85:8c:0c:52:97:77:db:76:5b:
47:d8:dc:0e:1f:c7:66:8c:57:a7:b4:d0:b0:de:3b:
83:0b:6b:4b:87:6a:8f:d6:6d:a6:63:68:b7:12:b6:
52:c6:90:c8:78:6b:0b:7a:33:94:6e:bd:b9:e8:f5:
d8:f0:f4:cc:96:56:79:36:8c:bd:23:43:51:a3:fe:
95:e0:60:d5:96:c8:2f:e2:bc:19:c3:7d:28:8e:de:
c5:35:5c:66:42:0b:f7:7d:3a:33:92:97:13:6d:22:
7c:c2:df:0c:00:32:04:23:59:e9:52:ef:e9:2f:0d:
36:00:3a:55:b8:6b:8a:97:e0:9f:30:8f:c1:f0:a8:
ef:8f:0f:e1:54:ac:eb:9e:3a:e6:a8:15:5d:9d:21:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:08:84:C3:E4:40:89:D8:48:76:D7:B7:65:FD:0A:5A:AB:8D:F3:BA
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:56:78:c9:90:63:da:66:ae:64:ab:41:76:73:8f:de:74:d9:
2a:ee:f2:cd:9d:23:c7:99:0f:2a:86:92:3b:fe:2a:be:6d:e5:
8a:ee:e1:58:0f:42:6f:c2:dc:c0:69:04:fe:8c:2e:7f:d4:d1:
40:27:b6:1f:f7:3b:06:e1:15:57:cd:21:e3:e6:df:67:36:ba:
bc:61:fe:5e:f8:ce:f0:9f:0e:35:10:16:81:45:9b:b6:93:7f:
9a:7f:5e:7d:a8:01:7d:62:90:90:6d:49:e7:87:0b:6c:5d:43:
b1:f3:c8:48:3f:24:02:58:9c:ce:7d:96:23:f9:06:d2:c0:dd:
6b:1b:18:a1:19:a9:ac:20:14:2f:55:33:99:73:79:d1:40:45:
f1:36:89:b3:7b:30:63:fa:c8:90:4f:64:5e:51:97:a2:b3:62:
17:14:e4:15:c8:d7:0a:4b:87:fb:8d:27:7e:80:f7:79:fd:00:
d3:cb:29:49:4f:24:f9:b4:95:62:a1:9b:d5:24:b1:4f:d7:d3:
cf:52:95:4f:2d:9f:db:2b:68:26:00:97:3b:87:73:db:12:0a:
29:24:ad:78:53:f4:b9:94:28:9f:b4:49:ab:f4:bd:3d:f0:7a:
74:e4:c1:2b:8d:f0:b5:2f:0b:3d:d7:42:b2:d2:c8:d1:9d:e9:
b2:96:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:59 2025 by rpki-client