Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: JPeKZTU7Fyy4iUeTfPtrzehzm+P7H39G/RK5O0RO2Wk=
Subject key identifier: 3F:CE:C3:77:9B:48:06:CD:A7:1A:35:81:76:8B:FF:DF:51:A4:45:86
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 0194BC3BE1C7F72D61EB443A7E311647318C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: k33LkGtp3h+XSKrkZbEV3D+eC4mTcu4aG1iMPXtTaV0=)
2: RKMnsBh-4put8CYQQZTi97USkG4.roa (hash: wO9DPGkGRSrC88wpgVtY03a6gormtMYZIYA4y3KWEyQ=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:c7:f7:2d:61:eb:44:3a:7e:31:16:47:31:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=3fcec3779b4806cda71a3581768bffdf51a44586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:21:4e:ab:1e:db:75:b5:3b:1b:e2:2b:48:
27:c1:3e:3a:b3:07:fe:5f:9e:82:d0:37:b5:9d:95:
58:37:0f:92:bd:10:e2:78:04:16:40:b7:2d:e9:25:
4b:ad:bf:14:7f:18:00:84:43:5e:b9:44:09:19:fa:
d3:08:49:e9:b6:7d:a1:c6:98:f4:e3:79:41:f8:a3:
3b:46:3c:90:cd:79:ed:1d:80:33:6f:d0:29:16:1c:
7b:dc:f5:a2:a0:06:8f:b0:65:88:8f:38:c6:f7:e5:
58:9f:c1:f1:66:23:49:d9:67:ed:65:62:60:8f:19:
97:e0:88:83:5d:88:3e:c8:9d:1a:ac:e4:d2:b7:cc:
88:2f:5c:9f:42:f8:0c:eb:c4:be:2d:b2:44:77:08:
11:08:44:f4:2a:7c:1e:ce:8a:cd:a2:54:82:9b:d9:
15:eb:27:80:a3:61:45:27:f1:1e:9b:0d:9c:57:55:
89:7c:a8:ce:75:18:a1:c2:7d:b2:c6:52:74:0d:78:
4d:4c:b8:61:d5:06:78:e7:8f:f2:0f:2e:24:3f:20:
e5:b3:1c:19:2d:f3:58:82:8a:97:ea:cb:92:b5:ab:
bd:c2:a6:ca:10:79:45:fa:54:9d:40:67:e9:50:29:
ca:a5:c8:a4:5f:bd:3e:05:ce:db:6a:04:fd:d1:76:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CE:C3:77:9B:48:06:CD:A7:1A:35:81:76:8B:FF:DF:51:A4:45:86
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7a:e8:6a:e2:3c:aa:82:e2:a5:91:b0:41:5d:6c:47:2b:e6:
30:95:2d:fa:07:80:39:53:7b:1e:84:6b:39:ef:c5:fc:bc:4f:
bc:55:8c:5f:82:e9:ad:64:78:51:21:5d:30:54:2e:0c:4c:4d:
b6:16:e3:b4:7e:66:c1:32:f3:9f:3e:12:b8:15:5a:36:55:b0:
62:70:63:91:a8:82:4c:eb:9d:96:f1:97:bf:69:c3:d6:8a:94:
d0:86:ca:f1:ee:b9:aa:be:31:8d:ae:62:48:f0:71:f3:98:0b:
72:6a:7c:60:75:b5:4c:37:68:24:97:05:c7:a6:74:02:5e:84:
6f:08:a5:46:65:79:c5:18:9e:3c:e9:d0:d7:dd:8e:97:c3:5a:
63:63:a0:ff:f9:96:46:9a:08:83:f5:78:a8:ee:e4:d9:e9:4c:
10:1b:ac:24:e8:bc:ea:f1:d6:b5:c6:cc:41:7b:a3:55:f2:83:
dd:c5:e9:12:02:5c:87:b1:2b:6b:f7:f7:c1:72:2e:94:a9:be:
3e:be:94:dc:5e:38:93:52:0c:be:da:20:cd:25:37:32:5f:74:
95:a3:f1:71:bf:43:a0:54:e5:f9:dd:40:51:33:fc:ba:ba:75:
f6:ab:06:1f:9b:53:ca:9a:5c:ed:41:c6:97:e7:8a:d9:93:c1:
49:c6:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:10 2025 by rpki-client