Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: jErGSB220TOq5DrPGO5JTus2uPVxavmlZHRfIh1NNT8=
Subject key identifier: 49:62:5B:58:F0:40:9B:AF:33:B9:FD:86:C1:AA:C6:F3:34:B7:F4:47
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 0194BBCDEF1BE12B00E50799ACE0EAB6B35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: GjM5YUTod/6JVZv/Hzoapvz7/BMeTgKJBHX8cP7mJfk=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ef:1b:e1:2b:00:e5:07:99:ac:e0:ea:b6:b3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=49625b58f0409baf33b9fd86c1aac6f334b7f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:59:41:02:8b:f7:d3:97:e5:c9:eb:fc:9e:
03:13:cf:97:53:02:99:4f:eb:43:e4:f4:ef:d5:95:
ce:c7:c2:d6:39:1f:49:cb:0a:8b:3a:d6:03:d5:b4:
7e:48:73:be:d0:a5:ef:81:98:5c:8c:29:27:a8:04:
d5:26:50:3a:05:5c:69:22:58:a3:1a:15:b5:c6:3d:
2f:b4:44:f5:38:5f:69:38:ea:f3:4a:60:de:6d:a4:
7b:60:4e:c0:95:74:8b:0d:c2:5e:67:9b:a3:91:c2:
d7:cb:f0:4d:0a:a8:3b:58:92:28:5b:21:44:5d:14:
9b:4d:c8:ef:a8:f0:0f:b8:d1:a9:02:c8:38:9c:eb:
c4:b5:81:ea:0b:99:5e:c3:ff:4b:58:de:60:f7:b5:
87:27:53:b8:59:c3:a9:e6:91:bc:75:9e:81:0d:ae:
b4:55:c0:71:48:bb:d9:d2:b7:f8:ae:6d:e5:bb:2f:
6d:07:44:f2:b4:e6:15:58:00:14:e7:04:82:27:8d:
79:cd:76:8e:bb:86:46:1b:4d:5d:a8:03:6d:0d:e5:
ff:cb:37:d5:84:82:99:63:2c:ae:b2:4e:c1:8b:ca:
27:85:91:23:da:3e:db:56:e5:10:4b:48:3d:48:19:
34:46:42:c1:e1:6d:9a:10:78:94:79:d0:98:6c:cf:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:5B:58:F0:40:9B:AF:33:B9:FD:86:C1:AA:C6:F3:34:B7:F4:47
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4d:54:88:d6:ec:ea:8c:b7:05:a2:a4:6a:6a:7f:2a:85:09:
ff:fa:3e:59:a8:31:81:7a:aa:dd:d6:93:aa:ae:95:20:7f:db:
97:7e:9d:8e:f3:5b:9a:ef:2b:ad:5c:73:e8:cc:16:2d:22:fc:
95:70:f4:b0:4a:69:49:2f:24:8c:40:af:b2:b1:a9:4e:a8:5e:
c1:16:29:0b:87:a7:e4:60:d3:d1:bb:3a:9e:27:db:d5:68:1c:
4d:a7:b1:22:72:59:2c:9c:ad:88:64:cb:7e:1e:a1:c8:59:a6:
48:a1:6a:6c:bc:ac:f3:c5:09:9d:2d:e9:5e:c6:5c:b4:e5:e9:
2c:29:58:e2:c3:8e:e8:63:8d:00:1c:20:06:0c:64:5d:44:b6:
d0:d2:a5:1d:84:66:ed:17:fd:de:0f:46:18:3a:7b:5a:88:d3:
22:b3:fa:8a:0d:68:11:7b:b3:b8:a8:50:58:b0:32:8b:45:8d:
7d:fd:cd:85:c6:75:07:92:8e:7d:8e:22:08:c8:e7:a1:da:41:
96:6d:1e:6e:8c:ee:6e:de:4b:6a:38:4c:34:68:e6:a4:c1:d4:
1c:4b:86:51:56:75:18:39:97:58:59:af:2d:75:c9:bf:71:76:
e1:05:e0:6c:04:69:75:b4:27:6a:04:22:94:d6:fe:4b:81:ea:
13:b6:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:51 2025 by rpki-client