Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: 2rHqpPyaAL/pHmYoyh3ssZYeJK7dSCP8D6H0K4zZ9u0=
Subject key identifier: 10:42:FA:B5:37:3F:1E:AD:DE:86:A4:60:E9:00:A6:C1:21:E7:50:FA
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0194BC04F1907B24C5E8868998A456A7C802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 048F
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: R/8D+oy8kZTfbfU9q57uwkmcNX7VkQNsJ3VdFdonLWU=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f1:90:7b:24:c5:e8:86:89:98:a4:56:a7:c8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=1042fab5373f1eadde86a460e900a6c121e750fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:ed:90:3e:24:3c:66:2e:58:ae:f5:8a:5c:
8c:63:0e:de:e8:a7:98:97:f6:18:0e:d0:a2:f2:8c:
62:c5:df:4a:bb:e0:c5:26:24:e8:14:75:f1:2e:e2:
98:1b:bf:c5:b3:c5:43:ab:87:52:ab:10:63:1f:ad:
27:54:3b:16:80:29:01:7c:b7:b9:01:a7:55:ab:95:
8a:0d:c1:a5:d5:35:15:bb:d0:4c:62:8c:99:47:da:
fc:99:5d:8b:e7:d8:1c:90:da:a6:91:dc:d4:e9:68:
f7:11:28:49:5e:c5:0f:d1:2f:f4:f3:fb:a6:9e:a8:
55:78:04:04:d6:ff:c3:41:47:de:67:44:ef:97:91:
8d:27:b9:2e:b7:07:10:17:de:5b:1f:8b:6c:91:ec:
dc:5e:1f:c1:be:11:77:95:14:97:25:47:07:e8:1e:
de:27:11:96:45:88:5d:44:28:47:6e:29:ee:fb:68:
48:df:51:c3:8f:b6:b3:c0:f5:fb:ac:53:ae:53:0d:
52:7f:63:bc:3f:8b:17:bb:0e:41:a0:77:ae:9e:31:
2a:a4:4d:38:ae:02:25:29:be:37:2a:83:08:91:bd:
82:6b:af:4d:63:b7:be:6f:6d:f6:6e:8c:05:43:b3:
92:15:b6:ba:29:87:17:2a:aa:a4:29:ba:e9:d2:42:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:FA:B5:37:3F:1E:AD:DE:86:A4:60:E9:00:A6:C1:21:E7:50:FA
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:05:84:a2:56:4c:8e:ca:b0:17:48:4d:fb:48:e4:f3:9b:
99:28:0c:da:20:bd:2b:16:f3:30:af:51:5d:14:a2:cb:8b:73:
71:6c:be:24:68:e5:65:17:1a:24:ba:f8:60:79:14:5d:01:da:
4d:66:17:cd:7e:5b:1f:fa:a3:02:7d:38:8e:23:49:a4:5d:b8:
9a:b8:f7:04:f8:7e:73:6d:a9:cf:0d:3c:23:3a:06:ce:44:78:
e7:d4:1b:c0:d9:b3:66:de:4c:58:06:64:a5:60:53:cb:70:a2:
e5:23:ae:b8:ce:75:f4:3c:47:01:15:f8:b7:34:73:78:3c:f0:
7e:3e:fa:6b:5f:a8:a0:19:c6:5f:10:7c:dc:dc:95:40:b0:d4:
51:0a:59:1a:10:69:9f:33:04:a9:32:b5:aa:1a:11:b8:eb:fa:
5a:d5:fa:a7:60:7c:d4:56:01:c2:40:92:61:c1:24:ef:fc:67:
91:37:30:cc:29:60:51:b4:8a:2f:a7:83:14:4c:e9:e4:7d:b6:
89:dc:93:34:b6:de:5a:d9:5b:29:de:5a:18:d7:2a:fa:83:ca:
16:05:20:39:84:ea:7d:42:83:22:83:8e:8c:d4:36:42:31:57:
1b:71:75:3c:ab:d9:23:a1:66:1f:6f:01:88:de:77:9a:bd:81:
a3:bc:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client