Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier: Q2R+/GRIoQWhuL+UR6lVG6z0tylUGw5KIIZkMpydh4c=
Subject key identifier: D1:95:C0:9C:A9:7E:65:87:26:3F:B5:91:F7:8F:34:CC:23:63:08:D2
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 0194BCE0941BD82EFD38CFB7664BD864CBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 049Ezw3bbxyAcFdFjmuYEFwXBsU.roa (hash: WEmFcKUdgxX3uJIjqIrmLcxjRyqE9nhGbay/JhL8Msw=)
2: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: /BRPdaDblyYIGg0L2anYkQEqb3R8V3kkshKzI3a+PP4=)
3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=)
4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=)
5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=)
6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=)
7: WlImTkdj0wNEcwflMaO4AnVa210.roa (hash: zWCGguUKICYgSUBCeaz32D1L+DC9qzh5JbbptYsTHXU=)
8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=)
9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=)
10: rfaYifv6vP09LUDZyJgmXgNuRBY.roa (hash: 3YnmTkreSCvZ8bmkdTX5JVA41X7rmqWV9kGtu5UglLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:1b:d8:2e:fd:38:cf:b7:66:4b:d8:64:cb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=d195c09ca97e6587263fb591f78f34cc236308d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:ee:ff:67:88:f4:5d:43:0f:9f:4c:e9:5e:
91:b4:c8:56:1f:00:ac:1b:07:0f:7e:fd:78:b9:8f:
a2:35:bc:ac:26:68:5e:ff:a0:3b:04:aa:17:c8:12:
1e:8f:0e:90:e1:0e:99:84:e5:ef:66:29:5b:ce:aa:
9e:af:49:0e:59:18:47:9b:61:9a:a5:16:9a:c0:72:
df:63:b2:19:f4:c1:6e:83:50:e6:e6:10:8a:c9:cf:
e4:8e:9f:54:51:43:22:a8:6b:9c:b4:c8:6d:af:9b:
69:90:df:5b:5a:c7:2d:ea:d9:6b:ca:94:48:72:2b:
28:cd:f3:78:d2:bf:73:43:e9:be:9b:a7:c6:0f:a3:
f1:09:2f:5f:79:a8:62:6c:42:04:ab:50:a9:6a:c9:
c6:5c:5d:35:a0:13:0e:a4:f3:cd:6a:d0:c1:0b:b3:
44:a7:c5:a8:e8:ad:d0:f8:52:3f:cb:51:e4:0b:57:
7b:97:61:bb:06:f0:d1:45:9e:9f:15:ed:4a:0e:34:
62:7b:b8:14:28:17:98:ca:5f:6b:70:02:ed:5b:3e:
8c:ae:41:e5:44:a9:20:d1:70:51:d7:e7:9d:a3:a6:
92:d9:47:31:8d:a2:75:1d:34:77:78:2f:32:9d:a1:
a0:2b:7f:9c:ce:c9:43:d2:ea:d2:22:1c:50:70:61:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:95:C0:9C:A9:7E:65:87:26:3F:B5:91:F7:8F:34:CC:23:63:08:D2
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6b:c5:f3:1d:4b:46:fd:04:5c:84:21:3c:d6:3c:9d:d3:9e:
ce:78:af:df:b2:07:d1:64:db:c6:c8:58:9a:cf:6d:b8:8a:d2:
e2:84:86:d8:17:e1:77:ee:6e:59:3f:a2:50:7b:ad:75:fd:a9:
b7:b7:e9:8d:e3:4f:08:1c:ea:3d:fb:36:41:fe:32:bd:cd:0a:
2e:f7:32:a7:ec:e8:cb:dc:d5:dc:8f:1e:d5:be:0e:f5:68:3e:
4d:c0:fa:04:e6:87:19:f2:ed:9e:d2:de:76:bb:d7:ff:02:6b:
c6:51:a6:b7:e1:cf:07:d2:e5:38:5e:90:3f:12:32:70:f2:cc:
75:11:94:7f:6b:68:d4:42:2d:76:49:c8:90:ae:e1:cc:83:c0:
f4:79:90:87:b2:8e:5d:f4:50:28:62:45:53:08:29:49:f2:54:
9b:cf:90:0d:8e:19:64:b2:19:62:62:9f:94:0b:e6:42:99:fe:
f3:61:28:2c:c8:8c:ed:11:ca:24:bf:fa:2c:f9:09:0c:47:00:
43:26:95:c4:81:ad:37:73:82:7c:0c:ae:d0:65:48:f4:60:ad:
24:5a:60:46:6c:e8:ac:cf:7f:8c:57:f0:ae:da:ce:c9:c9:ba:
f7:cc:43:68:85:58:a4:88:3b:00:da:5b:23:f3:f6:5a:4e:19:
0c:86:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:49 2025 by rpki-client