Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier: wca/92FaxYmbaH9mW69doltHXBk+v10pkX41BP/K7+U=
Subject key identifier: F2:08:96:90:24:0B:30:F1:C4:0B:B7:79:30:97:5E:73:B8:BB:5A:C9
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial: 0194BC3CA21CC3AA636C22733FAED82957A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number: 0303
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: TxVMPwkr8qkuTG4GCSQwQGJtbUg7BFwUarOhFfVBCao=)
2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:1c:c3:aa:63:6c:22:73:3f:ae:d8:29:57:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=f2089690240b30f1c40bb77930975e73b8bb5ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:e3:4f:11:d6:89:a9:32:32:35:92:fa:42:
3f:dc:0a:8d:51:58:9d:25:37:68:52:41:b5:d1:8d:
92:f9:65:d3:bd:2b:dc:0a:d8:f0:a7:07:0b:fe:2e:
27:89:96:2b:06:fa:fe:10:d6:a1:8e:fc:c2:ad:8f:
77:b3:c5:62:00:ae:ea:4e:7e:7f:a8:65:0b:84:c7:
15:d2:9e:f7:00:03:d4:cf:96:7f:5b:71:5e:df:d3:
86:1e:7f:e5:5c:67:3f:7d:2d:12:e6:ff:d8:ee:b3:
e5:09:8c:2c:83:1c:9e:43:a5:1e:8f:ad:30:15:39:
b3:04:6a:a8:e3:4f:b3:3b:c5:a2:ac:5e:e4:0c:05:
da:b1:8d:0e:ef:2a:69:c2:39:63:c4:f9:cf:9e:71:
06:c9:be:51:6e:56:f6:66:3a:28:4b:3d:63:59:78:
56:d3:40:f9:15:cf:f2:3b:49:e4:3b:a5:c3:9e:e6:
7c:cc:d5:48:4a:93:e5:50:ee:77:2e:44:48:a3:ad:
c3:e1:ad:85:43:b7:91:c3:5b:07:68:93:1a:69:96:
2c:c8:73:5f:d9:0b:35:0f:54:a0:b0:e0:9b:f7:1d:
13:31:29:74:66:f8:d4:76:97:f0:0d:0e:33:5a:29:
7e:99:31:25:31:a5:ad:eb:00:e0:38:10:2f:41:75:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:96:90:24:0B:30:F1:C4:0B:B7:79:30:97:5E:73:B8:BB:5A:C9
X509v3 Authority Key Identifier:
keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:da:4d:14:4a:e7:77:67:ed:ec:cb:a6:c8:40:ab:05:1e:
4e:48:8c:22:eb:c5:de:b8:53:ed:0a:7d:a2:06:ed:94:1f:3e:
26:8f:55:14:99:d6:98:9b:e0:24:4f:b4:88:21:93:92:1c:7d:
fc:7f:a2:49:69:a7:54:f2:09:c4:bf:60:6a:b3:83:58:db:7d:
e0:32:de:00:bd:68:34:5d:9b:ce:e7:43:1f:83:e6:01:2a:90:
48:b2:ab:6d:03:03:3e:c6:48:dc:09:33:21:3b:45:a3:6e:7c:
57:36:ec:8b:cc:50:2c:fe:06:af:36:37:47:24:7c:ff:4f:2b:
06:7e:c2:0f:15:cf:ac:4c:b5:bb:a8:58:8c:d6:27:5c:2d:ab:
21:a6:a3:5c:cc:03:32:80:05:e2:2e:0a:d3:87:2b:ba:b2:2e:
4a:01:27:79:db:bf:63:8a:e6:ac:e2:97:4b:37:16:c9:cf:4a:
7b:0d:84:07:5c:40:ec:1f:0b:11:54:44:f7:d0:d3:f3:6e:7b:
79:8b:84:ad:d5:29:fd:33:84:77:ea:13:19:fb:bd:78:06:ce:
83:96:2d:30:64:89:81:c1:ef:21:d7:04:1a:79:8b:4c:16:7e:
6e:a4:c4:62:7a:63:5b:1d:95:7e:33:02:72:fd:42:fe:1a:36:
6f:b1:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:39 2025 by rpki-client