Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: jUrA80RjezGDFUuyHcf3Do3S5aaW1/lYH/vwUQGwQl0=
Subject key identifier: 34:1B:0F:81:41:EA:E2:1D:22:F2:DF:2F:EC:18:D6:6C:34:6C:9A:2D
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 0194BD4EC8072AA8F3B0B4D4E1821EC87ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0879
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: i7sLieUafxKzdTVfmOgnrjuW+9Fdwo4sC7UXhKyU+4w=)
2: aAJKdn_u125mac3iiC8QVztvInI.roa (hash: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c8:07:2a:a8:f3:b0:b4:d4:e1:82:1e:c8:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=341b0f8141eae21d22f2df2fec18d66c346c9a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:6e:7e:7a:d0:11:0a:8c:58:de:04:83:45:
1b:1e:d1:1e:5a:10:7e:e3:1f:1c:15:b3:dc:88:6d:
f9:9b:53:7e:cd:88:f0:5b:79:ad:72:b3:aa:1a:ed:
20:c0:20:94:b5:3e:3f:76:6c:09:ca:3f:38:8a:10:
12:f6:0a:ba:76:d0:ac:51:c0:a5:49:6b:d5:2b:9f:
37:6a:ea:4d:c2:b3:ec:7d:cc:85:97:ca:1b:14:9b:
e6:3d:96:5f:8a:db:6b:83:6f:66:81:0d:89:81:ca:
01:3e:aa:85:12:70:bb:9a:d2:c3:d5:91:ec:ad:27:
3c:79:f6:16:a9:37:50:0d:98:e8:a2:50:4b:3f:91:
06:8d:d0:88:18:5f:43:70:42:60:3c:ec:ee:1c:fa:
8c:7a:ba:c7:cb:08:d4:82:e1:bc:a6:e1:3a:c8:a6:
27:46:5a:3a:bb:dc:fb:41:99:25:d6:ee:59:53:57:
22:9f:9d:32:66:65:e4:f6:f2:fb:0f:60:ad:e5:92:
7c:0f:46:16:ba:3a:0a:43:5c:5e:83:9f:8a:40:ec:
14:8c:c6:70:c3:93:0e:70:8c:9f:0f:b2:c2:58:79:
75:ec:26:19:38:a8:f7:ab:f3:60:b4:ca:31:53:8b:
7a:d8:fb:27:a0:50:46:d1:bc:53:0a:9a:6f:d7:6a:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:0F:81:41:EA:E2:1D:22:F2:DF:2F:EC:18:D6:6C:34:6C:9A:2D
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ae:a3:32:7d:f8:80:27:c2:0b:0a:11:6f:f6:52:29:e0:40:
cd:74:c0:c5:db:ee:7f:fb:b8:44:a1:e2:ce:02:33:bc:0d:2f:
1b:94:35:d5:af:89:91:19:3f:c6:6c:38:53:5a:29:6f:f5:86:
0a:ca:bf:d7:c8:56:67:d2:fb:0a:35:54:ef:0f:11:10:62:f1:
cb:4d:74:14:d1:cc:15:12:55:6d:e4:e8:86:d1:8f:2b:66:e2:
66:f9:c8:d5:3e:51:07:de:88:22:52:b6:73:c4:db:90:81:88:
1c:d2:63:53:e9:34:ce:79:f1:c6:46:24:b3:28:3c:a4:db:27:
39:9b:a4:88:eb:5f:c6:95:bc:f9:95:2d:76:6f:c9:ac:6d:ee:
36:39:47:0c:e1:35:a3:98:e4:07:2c:b0:b4:1d:96:48:4b:90:
da:fa:30:ee:0d:55:6b:cc:28:41:80:24:3a:82:62:03:08:b8:
76:f8:72:19:72:bf:d6:16:5f:80:06:37:68:13:12:09:38:c3:
b6:d0:95:d3:99:66:7e:f4:2e:43:bc:58:bd:ab:61:a7:93:fe:
b9:02:9a:ab:d1:69:53:63:74:58:07:d9:3c:05:4b:66:f8:c6:
c8:18:8b:54:3b:8d:19:e5:43:86:c4:49:c9:38:33:c7:aa:78:
e2:23:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:46 2025 by rpki-client