Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: O9qk9/sdTpfCHDwsNi7fwcLkRghKWgwgVoOyDpO2vhA=
Subject key identifier: D8:76:92:AB:7D:47:14:03:68:FD:F2:19:C5:7C:47:AA:2A:79:AA:02
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 0194BC3C6E74E7430A2237340D0D34C27747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: kx/Q9f35TGI9SL7jhKuwuBfXLsYfHh6R1fpa5cnRUj4=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:74:e7:43:0a:22:37:34:0d:0d:34:c2:77:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=d87692ab7d47140368fdf219c57c47aa2a79aa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:dd:06:af:99:af:ae:41:0e:de:1e:26:23:
16:d6:4f:95:04:ff:ff:29:13:28:67:e0:68:a3:77:
52:86:67:64:50:49:c8:1d:ec:e1:98:1a:d2:c8:74:
e9:9c:d1:00:fa:ab:ac:c0:96:e0:35:c5:25:2f:a2:
a5:03:7e:c4:17:38:4a:f4:49:b7:f8:c0:63:d8:43:
f9:0d:3c:93:6f:c2:79:7b:03:ec:e8:63:af:85:fc:
20:7b:08:6c:0d:0c:73:84:ca:ed:e9:d4:ca:72:26:
8d:51:7b:64:a5:b8:52:ac:1e:56:c5:40:58:d2:f1:
e8:90:4b:98:22:97:16:56:7f:21:b9:58:97:16:52:
4a:9e:73:25:c1:ef:b4:bd:0e:6a:d5:7b:e1:08:09:
17:d2:aa:09:3a:3b:d6:de:74:d1:ee:4a:f6:f1:0d:
aa:a9:78:64:12:95:2c:b9:05:6e:29:3d:b8:81:cf:
e0:c1:af:3e:e4:49:f1:61:ae:a7:7f:93:eb:1d:74:
ef:fb:b2:12:c3:4c:5b:89:de:e4:cd:1d:50:ec:a6:
1b:eb:49:c4:ef:b1:42:d0:5d:ae:26:53:4c:d2:d1:
55:7c:1f:78:b3:29:61:74:4a:7d:7b:bd:1e:9e:53:
1d:95:10:44:47:e6:d0:ae:82:ec:91:eb:eb:12:1c:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:92:AB:7D:47:14:03:68:FD:F2:19:C5:7C:47:AA:2A:79:AA:02
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:54:87:24:0e:1a:df:09:83:85:da:06:93:6e:e5:ae:8a:
18:c0:69:53:4f:05:7a:e3:f4:b6:24:1a:eb:46:e4:00:15:bc:
32:5a:20:c8:31:67:61:8d:11:8c:c2:f1:3d:58:27:59:76:bd:
24:cd:25:70:b5:ca:64:dd:26:eb:3d:ed:3d:0e:30:45:56:cd:
36:52:87:d0:3e:38:ed:88:8a:5c:8c:6b:f1:a8:08:89:49:17:
b3:27:21:1c:32:7c:46:34:ba:f2:1a:1c:1c:11:16:8c:02:3a:
1d:67:69:12:a6:2b:12:91:de:2e:ff:b4:b2:fb:08:b6:77:38:
26:e0:76:7b:fb:39:4d:3f:a0:65:77:db:da:95:42:96:8a:6e:
ce:7e:99:92:a9:3f:da:30:d9:4a:58:08:11:9a:13:3d:ad:1c:
ef:4f:e7:76:c5:e4:eb:02:bf:63:10:54:d2:84:06:3c:53:3b:
13:e9:da:61:2e:69:a8:63:f0:ed:8e:92:6b:6b:a3:62:a6:87:
83:6e:ae:16:e9:c6:2e:39:c1:87:44:78:54:99:4f:fa:d3:b2:
ad:39:a5:0f:1e:2c:49:0d:46:43:1f:cd:b7:18:bb:69:1e:a1:
db:8e:90:ad:08:15:fe:6e:17:66:9d:7d:f6:f2:c3:1c:20:04:
59:ba:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:59 2025 by rpki-client