Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: pRFxmgJdEFDS6KUHgII1kG3O6oq6f6iw3uSQlTzwYRw=
Subject key identifier: E7:61:B2:20:20:E1:D7:9E:5D:D7:22:63:6D:4D:C9:50:FF:C3:85:5C
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 0194BC3C2E705EB89899C6BB3924F6F3F99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: u/4exRnF4wDlcHjwjrPqXG2zy4oVdlD1p0Maz3QsuEo=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2e:70:5e:b8:98:99:c6:bb:39:24:f6:f3:f9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=e761b22020e1d79e5dd722636d4dc950ffc3855c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:6a:26:9c:2e:9d:b3:e8:86:c5:1f:3b:21:
c7:6c:75:5e:49:45:58:7a:73:a0:05:ae:20:47:08:
40:a1:30:92:d9:c7:67:31:40:67:41:16:96:c5:94:
9d:2c:8c:c1:88:66:46:67:0b:61:73:39:58:8f:cf:
90:1d:1a:6b:eb:c9:64:32:aa:bc:af:b5:7a:eb:96:
18:a6:81:56:c5:ec:08:5e:de:a9:c7:08:4d:48:8f:
f9:68:2d:99:09:1a:31:37:9f:76:11:a4:12:5e:73:
c3:06:8f:bc:d9:af:e6:ba:ce:1f:6a:e8:7a:30:d5:
df:c2:e8:af:fa:3b:15:7c:d3:ae:fc:28:ad:86:db:
8e:ea:2d:27:75:e1:1c:d0:63:e5:04:c4:1d:ba:4d:
9d:3b:a0:63:21:9f:85:bc:b2:b3:e3:72:16:62:cf:
29:3b:29:28:cb:57:b8:49:50:62:88:f0:b4:7c:f7:
dc:01:96:a3:90:e4:ca:7c:4c:76:16:23:6e:ba:b6:
ad:57:a1:56:28:49:a4:ea:7c:14:a7:68:53:93:30:
3d:69:30:91:49:d5:38:c3:79:53:87:f5:4a:e7:e1:
32:ab:5d:ca:9d:b9:76:35:ef:6a:08:ff:03:81:94:
92:46:1b:05:41:a2:03:cd:ac:88:f9:30:a6:b0:19:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:B2:20:20:E1:D7:9E:5D:D7:22:63:6D:4D:C9:50:FF:C3:85:5C
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4a:8e:aa:4d:aa:f3:58:43:be:9a:1e:bf:0e:17:4e:47:95:
8a:30:8a:d5:ae:0c:9b:2f:9e:9c:f7:44:0e:58:a0:be:f2:85:
99:19:9c:be:cf:9d:fe:30:21:d1:17:34:19:f5:80:97:6c:54:
e7:34:88:3b:98:7f:0a:ba:70:d1:28:f3:0f:11:fe:30:92:bf:
e0:81:3e:cf:7c:d3:6b:af:76:0b:35:a0:a8:5e:cd:14:50:ae:
d1:8b:fc:6a:56:a5:55:dd:d0:ee:44:29:0e:02:ee:a0:56:14:
16:2c:be:6f:b5:89:20:98:c7:85:0c:64:5c:03:22:78:6e:96:
d9:5d:77:15:a6:3a:b0:03:d9:b3:e0:74:e9:0a:69:b7:d8:18:
d5:4f:81:34:75:50:53:5e:8c:39:f4:79:e8:e1:4a:9c:1b:4a:
31:18:66:96:f8:94:2a:32:68:6a:7c:05:15:45:6c:e0:2f:97:
bf:71:e7:96:cd:6f:61:b4:07:49:73:dc:5f:de:a6:c9:63:d8:
dd:e8:d5:1c:ff:3f:f1:2c:37:ab:d9:b5:25:cb:d4:fb:bc:9a:
81:2e:36:75:a9:95:08:0f:b8:65:39:51:64:26:22:e1:21:cc:
42:2b:ee:8e:4b:17:a9:b4:31:df:f1:02:e4:d7:74:68:c2:56:
b2:6a:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:11 2025 by rpki-client