Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: vKIeJFCKe5t+eTgQK0IXUwYccOaheXbWtD+P4TpFwa4=
Subject key identifier: 9D:DD:C6:E6:8E:02:7B:CD:C4:ED:02:D4:8E:49:7B:3E:83:BF:E8:AE
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 0194BC3BE957686E5F5E37F6328AE894A9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 0F57
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: j8ZG2HkheinlUAiosZVs9PwcYnUYzOVgVR2rgx5aIq8=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:57:68:6e:5f:5e:37:f6:32:8a:e8:94:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=9dddc6e68e027bcdc4ed02d48e497b3e83bfe8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:90:19:2a:14:ec:72:13:ed:bc:3c:c3:12:
66:b3:fe:e9:7d:48:a1:4c:f1:8e:92:4b:9e:ba:05:
a7:df:6c:57:f3:86:2e:43:20:49:88:76:a6:c9:a0:
62:94:f5:be:1c:a4:d4:6f:7b:ae:8b:18:ac:8f:8f:
57:1e:72:0c:40:a2:38:e4:1b:b1:ac:4e:b6:36:5c:
23:a0:6f:5e:6f:22:ac:bc:16:65:cc:ff:30:81:4a:
91:2f:ae:68:0a:7e:90:78:1c:d0:0c:0e:45:97:db:
1c:e7:26:06:f0:df:c8:2f:f3:9f:77:da:29:b3:ad:
09:01:a8:b2:e0:60:e9:5a:4e:a6:f2:7f:e5:bc:9b:
12:91:94:a8:71:1b:7f:36:a8:49:12:cb:05:6b:2a:
04:d2:7f:53:38:2b:7b:05:56:2e:b2:ea:8d:60:7d:
1f:af:77:e5:a0:af:16:d8:41:72:f7:85:70:8a:fa:
85:f3:69:70:58:9d:32:e8:25:54:8d:53:8f:cb:03:
b8:a6:07:56:69:5c:e0:13:ca:9f:82:d9:c5:eb:f4:
e2:91:34:34:49:68:52:75:06:fb:88:f1:85:2c:2e:
d7:3a:1a:d9:07:3f:db:d1:88:41:c1:88:5b:f6:a6:
8d:bd:0d:b5:ed:ae:27:9d:50:5d:ab:aa:31:2d:c7:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:C6:E6:8E:02:7B:CD:C4:ED:02:D4:8E:49:7B:3E:83:BF:E8:AE
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:02:0e:b7:ea:ea:59:1e:62:35:21:55:96:58:94:c0:94:5a:
74:73:e3:96:82:e7:71:3a:67:78:08:f7:86:71:ef:fc:39:bb:
f4:e3:aa:3e:b1:e7:d2:0e:a6:16:ce:cf:69:fb:ea:f2:18:2a:
de:1e:27:a7:e1:b3:45:75:ae:3c:a7:92:6f:e5:4a:e2:02:c2:
7d:26:6f:18:57:18:61:54:32:75:30:e5:7b:fe:02:66:58:09:
d9:cb:6f:2c:68:83:5b:37:e3:40:80:8a:e4:8a:c4:b9:66:8b:
98:fc:9e:19:ff:87:50:9e:b0:b6:83:d5:f7:bc:94:6f:cf:3a:
9e:86:94:51:11:fc:57:20:bb:39:e4:40:e2:1b:b6:29:bc:77:
12:8a:af:6e:44:9d:dd:c2:2d:10:36:85:aa:1e:bb:5b:87:d0:
47:e6:be:f1:e0:d2:f0:a5:ff:66:24:9b:fd:5d:cc:2f:00:4f:
f9:44:2a:c3:f2:ff:23:f7:c7:21:f4:66:39:0c:a3:f3:3f:76:
b7:e2:99:7e:49:c3:0b:35:48:ef:7c:8a:44:21:8b:49:bc:f2:
99:a8:96:90:99:9f:77:31:3b:11:34:53:f5:88:e1:32:80:78:
76:f4:f5:4f:4a:b2:65:33:6a:3a:13:ad:b3:65:4e:7b:f9:c4:
81:c4:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:16 2025 by rpki-client