Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: ZsUIJdCwbx7J4U+XfVuwbwXAKbnMtpvL00HbsdI3r5U=
Subject key identifier: 76:C0:A8:DE:ED:65:28:FB:23:19:45:8A:97:29:0C:AB:C1:D7:DA:A1
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 0194BBCEF6D7B243A197877A86F065E8AB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: 6rEGPG8baWgRyPHH/gYssvVVxjE/Nk+35pZXaJtbpF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f6:d7:b2:43:a1:97:87:7a:86:f0:65:e8:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=76c0a8deed6528fb2319458a97290cabc1d7daa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:54:fa:95:43:9a:70:ea:33:0a:c7:bb:56:
39:21:e8:88:77:d7:70:06:83:5c:c5:38:d5:6b:02:
30:94:05:d8:98:63:96:0e:52:29:67:9f:66:93:2d:
7b:f3:e7:36:8b:3a:8f:22:14:11:dc:df:ef:27:88:
83:3b:f5:d1:9d:26:2b:e6:7f:8a:2f:45:df:ba:66:
81:4a:07:d5:21:3f:c3:fc:db:54:95:53:15:b0:b7:
9c:52:f9:e9:1f:64:1a:d5:e0:32:42:0a:a7:f1:7e:
ee:8a:ed:d8:4d:9a:3d:56:a5:e8:3d:03:3e:2c:0c:
3b:7f:fb:02:2d:70:b3:a5:86:4c:33:7e:a9:3a:27:
46:a3:bb:d4:78:ef:2a:5a:43:0c:a1:39:b3:a4:a8:
f0:3b:ee:46:0f:5e:bc:e1:ee:a0:df:b4:bd:ad:9e:
8b:85:46:00:e4:1e:1e:af:40:be:07:bf:f7:cd:5f:
5e:93:4c:a6:86:39:21:be:15:a5:43:ac:5d:12:17:
c0:50:b0:7c:f5:31:6d:eb:ae:c3:1a:d1:b5:29:c7:
b7:6c:60:54:29:57:d4:03:b7:1a:13:89:56:bf:73:
5c:0a:bf:0d:f2:5f:9a:81:63:24:17:b7:99:98:b8:
22:be:52:f1:5f:ea:9b:3a:fb:cf:12:b5:8c:91:3d:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:A8:DE:ED:65:28:FB:23:19:45:8A:97:29:0C:AB:C1:D7:DA:A1
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:90:be:11:e7:18:64:ea:78:9f:6b:fa:20:08:94:c9:27:0f:
37:19:5a:c5:87:a6:2c:a7:86:15:e0:f7:c8:f2:db:3f:4b:cf:
85:1e:0e:72:be:c5:e1:4e:a8:0c:8a:a6:89:82:b8:64:d8:36:
38:af:7b:ac:3d:b4:0e:b8:2c:58:55:11:7b:a6:24:de:e3:19:
d8:26:88:d3:9e:3b:d4:08:e4:4a:01:9a:ae:ea:4c:c3:00:ba:
8f:8f:8d:3f:a4:8e:60:5c:26:fa:91:3b:db:42:84:0b:f7:2b:
20:5f:02:84:2d:c7:2f:98:4b:65:29:f1:28:96:00:62:96:7d:
15:4b:6c:40:1e:87:05:09:e4:03:ef:13:82:be:ce:2d:3f:fd:
72:a1:05:92:90:84:2f:fd:4f:a2:84:c8:82:ef:a4:15:00:cd:
42:f0:89:c5:67:d7:cc:e7:87:ca:66:73:17:56:07:5f:80:dd:
0f:b9:a5:ec:98:72:be:1b:7e:c9:80:0c:dc:89:06:ad:76:c9:
fb:4c:fb:77:03:13:69:7d:b8:76:76:b7:df:f0:6c:38:48:aa:
3c:b5:c5:14:ba:65:02:1f:06:51:70:80:88:a6:7e:c8:6e:fe:
85:6c:2b:4c:10:da:df:c3:6f:55:6a:ee:92:a4:c3:eb:f1:56:
ee:c5:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:03 2025 by rpki-client