Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: bQf+dYMVtpkZKS59T/94pA3UHtYZNhrIwSNyrJP0pls=
Subject key identifier: B0:E4:16:E9:87:F3:81:BA:50:F9:C3:55:02:F5:90:D9:71:A2:68:B5
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0194BC72C18DD3B32A4C87C8378C0537DEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: EpTn7XsSEnh++aG4uUHnkJ3mqC+qqlhaq7bo5k6znws=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (hash: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:8d:d3:b3:2a:4c:87:c8:37:8c:05:37:de:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=b0e416e987f381ba50f9c35502f590d971a268b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:41:23:15:71:c6:7a:86:bf:4a:37:23:14:
17:77:b2:f8:c2:4d:fb:3f:2a:58:ed:45:48:0e:01:
8f:cd:1f:6d:73:c4:5c:cd:15:91:e4:1c:da:90:92:
06:51:9f:b1:74:59:b0:12:2b:94:a0:f1:2f:d7:f5:
4f:4e:90:81:08:61:52:26:66:89:8a:29:69:2c:77:
23:bf:1b:7d:89:c4:31:b9:cf:49:d8:84:a0:ac:e2:
3a:c8:d8:8d:81:32:f7:5b:d6:f0:34:84:d1:c5:2e:
b5:70:0a:7b:4b:e2:e7:78:84:2b:36:58:07:17:31:
54:86:d1:88:32:fd:d2:63:76:cb:11:31:22:a9:be:
ad:c8:1a:05:20:a2:75:b8:58:40:80:a1:96:20:4f:
a2:94:07:06:ad:f1:28:5b:46:2d:06:ba:7a:ae:0b:
56:15:04:15:cd:07:1e:9d:04:01:69:53:e7:d3:cf:
41:b1:1c:fc:f0:7e:ac:70:75:0b:5a:ec:96:1f:4f:
ba:e2:30:68:e5:b1:99:12:ef:3b:8a:ae:ab:80:c3:
d6:6f:d5:5d:36:39:4d:55:ff:b2:e1:49:84:a4:e9:
7d:d2:ea:1f:51:11:65:b0:b5:03:3a:e3:2b:84:31:
70:54:3d:2c:7d:31:5a:2a:23:58:5c:e9:3f:12:17:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:16:E9:87:F3:81:BA:50:F9:C3:55:02:F5:90:D9:71:A2:68:B5
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e7:d3:44:da:d6:d7:9d:81:07:d5:8d:70:72:fd:34:28:66:
03:4a:f0:88:79:8e:2a:79:67:36:ea:de:fd:ed:0a:aa:1a:42:
e1:6f:01:8d:d9:03:0c:51:02:b7:75:3e:cf:7b:d1:82:b6:8d:
6a:91:1d:37:2d:bf:11:59:e4:1c:41:99:eb:20:a7:48:9e:77:
61:8d:d8:59:c7:6c:2c:c8:bc:39:fb:23:98:50:17:c3:46:f3:
84:28:3b:fb:9d:33:74:29:d5:23:38:e2:f9:28:f9:dd:6b:94:
f0:64:8f:5c:ea:60:e9:5c:29:17:6f:17:43:21:51:21:c8:b2:
f1:ff:f4:01:4b:58:77:99:67:bb:69:1b:a9:0b:da:e3:3f:fa:
4f:8e:da:4e:38:2a:9f:65:0e:2f:15:aa:de:bc:40:59:bc:69:
e9:95:ec:14:14:b8:03:41:60:36:23:d8:a9:b7:7f:80:74:40:
0c:12:c5:79:c5:af:07:71:bc:8e:6c:d5:16:9d:10:f6:5e:49:
34:e9:5b:ab:05:73:b8:83:98:14:04:b5:8c:77:60:e7:d8:be:
57:37:5a:5b:31:be:15:72:0b:48:47:0c:8b:66:10:a1:bc:2b:
17:7f:1b:be:0d:1c:5f:5f:b0:fe:77:c1:15:db:cd:cf:e2:e5:
4b:5c:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:04 2025 by rpki-client