Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: MBF4/Sy2cS5xWakP0/QuG1wy0mwDvUu6O7mKkm4YVTI=
Subject key identifier: B5:B8:E5:F1:20:F0:1D:20:D1:5A:6B:3B:78:80:D4:C2:C4:1B:4F:69
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 0194BD858BE74B3EA1B2D36A72F2C365D124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: je8ZCg5/9nxF8YnUi1x2oWY0Kwh63ANE4zyTyfxffFs=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:e7:4b:3e:a1:b2:d3:6a:72:f2:c3:65:d1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=b5b8e5f120f01d20d15a6b3b7880d4c2c41b4f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:e6:a0:2d:4c:46:3a:ab:46:30:c2:9f:2f:
30:fb:e3:29:56:8d:8a:17:09:fc:90:75:75:d6:e0:
f7:bd:1c:3f:7e:67:b3:d4:f4:86:54:4d:4e:7e:be:
0a:be:28:f1:86:19:50:72:d5:8d:a4:9d:15:ff:54:
cf:46:d6:a9:78:18:09:ed:aa:f6:c0:1f:6a:3e:bf:
d2:cd:45:31:df:19:20:14:69:b3:1f:c0:08:da:e6:
8e:18:c0:77:0c:47:84:80:76:a8:a4:41:a5:87:95:
47:a7:4a:a4:84:1a:42:87:c7:7f:d9:8f:9e:2e:88:
db:67:85:aa:2d:81:7d:8f:b6:ee:90:97:36:71:40:
d7:b2:6b:39:f0:6e:e4:68:84:5f:93:de:8f:22:46:
1c:bd:18:a1:cb:e8:b5:c6:60:15:80:e2:21:ca:d0:
e9:de:d4:3c:4e:0f:82:32:39:2f:ed:67:6e:06:c3:
94:36:46:c7:5b:18:76:96:83:55:e8:1a:ed:e9:4e:
0e:4b:c1:b0:81:d3:55:1b:41:e9:15:e7:42:81:d5:
6a:1c:ec:9e:65:dd:88:16:87:9c:3a:de:81:af:0f:
f4:c5:f8:70:ee:08:89:f0:de:c8:fe:e4:1a:23:1d:
1e:85:ee:71:ca:a9:36:b6:68:2d:d0:d0:59:0e:1f:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B8:E5:F1:20:F0:1D:20:D1:5A:6B:3B:78:80:D4:C2:C4:1B:4F:69
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:78:5e:f2:dd:d0:38:ae:46:09:9a:97:10:65:6b:b5:41:
40:20:5c:df:88:08:bb:b8:69:43:c4:2e:da:7b:fa:ca:cd:ea:
5c:45:59:8f:b9:fa:10:00:25:67:52:13:44:a0:c2:82:98:8b:
d7:b0:59:e3:b2:db:e1:3e:13:f7:59:a7:18:c2:9f:dc:78:ae:
6a:19:d4:2e:02:2d:70:e1:d1:53:e1:dd:64:6a:ae:37:6c:af:
48:e8:9f:b4:6b:2c:96:f4:fe:f8:00:72:2a:26:92:27:b4:9f:
33:df:9c:ee:cb:c0:e7:29:32:84:7b:ea:00:aa:e8:a9:73:dd:
2f:44:1b:0a:2c:75:74:4c:af:5d:83:5f:43:e3:85:ba:f4:49:
63:d6:8d:15:6b:91:e3:a7:94:f6:9b:d9:9e:4e:fa:89:49:7b:
b1:dc:32:54:59:08:fe:00:89:b5:7b:cd:9f:c9:ff:e3:eb:c7:
de:af:96:38:fc:64:69:d7:f1:6b:60:5c:f5:e3:f5:1f:9e:7e:
60:a7:fc:b2:bd:2e:00:3c:99:9e:5e:8f:c9:0c:12:4c:4d:c6:
0e:57:8f:7d:01:84:d7:54:4e:02:34:0f:47:c4:f3:68:fd:be:
82:ee:50:e3:4e:2c:11:1d:a2:34:78:54:9e:69:b1:ef:25:ec:
a3:b1:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:22 2025 by rpki-client