Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: TvkAcBZTDQKmg7HAOm63Db6HKW0kNzndnFyxxw245fM=
Subject key identifier: 37:E6:8C:E4:2D:D7:A8:69:44:1A:9D:1D:4A:13:2F:37:DC:91:12:80
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 0194BCA9BB38599F3C0F46C41DDC15E75397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 1301
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: onDV6xPpzZohu430U+SS1iQByE8xWnXYLbEIdjz9mo8=)
2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bb:38:59:9f:3c:0f:46:c4:1d:dc:15:e7:53:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=37e68ce42dd7a869441a9d1d4a132f37dc911280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:4d:0b:f6:c7:ea:a7:cc:db:8f:cf:a7:30:
c4:29:f3:b4:bd:e1:c5:e1:5b:77:87:7d:4d:1e:e6:
a0:a1:40:6a:2e:13:ea:ed:cc:9a:37:18:dd:90:2e:
fc:00:a0:06:97:a1:cb:88:fe:f5:03:13:13:df:a3:
01:3b:a7:42:82:e0:4d:e5:2f:01:6d:33:11:60:a7:
3f:60:14:e4:db:8b:e3:ce:7c:ac:ce:36:d0:a1:a4:
6a:b6:ec:e7:12:34:e0:88:c7:64:a4:00:da:97:44:
f3:23:d4:64:97:50:79:8c:62:aa:07:a5:6d:28:f1:
6f:c4:43:21:b1:b7:60:0b:66:12:26:1e:2a:c0:68:
c3:5a:3e:9c:f1:13:5d:96:4d:ed:fb:73:c9:4f:a7:
44:70:b1:00:26:56:5c:26:9a:b4:07:b4:e7:28:bf:
4c:90:21:5e:d6:69:92:c8:87:e2:bd:7e:30:40:87:
d6:57:bd:00:e7:fe:44:4e:2f:2f:4e:a0:50:74:c3:
5c:2d:7d:43:d4:0e:91:3f:d1:5c:e1:3c:99:35:a1:
dd:7c:3b:50:b8:0d:79:a4:98:6b:1e:70:70:a6:b8:
34:4f:2b:d0:5e:05:79:5d:29:67:bd:c2:ce:62:0a:
0b:40:aa:22:5a:13:5a:be:64:e8:03:84:7a:b8:e3:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:8C:E4:2D:D7:A8:69:44:1A:9D:1D:4A:13:2F:37:DC:91:12:80
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:72:02:cc:a7:80:8e:dc:01:60:aa:06:2e:08:6b:1e:d4:04:
ce:87:fe:cf:32:3d:a8:de:94:48:f2:7e:e8:f4:2b:b0:cf:45:
f2:5e:c7:a7:f0:d2:ef:25:db:db:69:ae:af:61:0c:9c:da:b9:
0b:fa:b5:18:e6:5b:d3:87:43:af:12:51:d8:f8:73:05:c7:c9:
f7:01:ef:4d:3d:26:56:39:08:1a:88:51:4b:48:cc:95:b5:8b:
22:cf:51:06:20:41:12:f1:30:15:c9:12:b0:f9:4b:e8:9f:06:
d9:25:2f:8f:98:be:34:97:d2:ac:b8:5b:86:dc:38:89:8b:11:
10:5e:5b:ed:ec:2e:e5:6a:07:09:79:a5:73:39:96:01:52:7c:
93:c2:6d:de:b3:31:a1:9d:60:a2:2c:15:1d:2e:02:7f:ef:7f:
ad:e1:cb:62:d4:36:67:7e:c3:4b:51:ee:9c:ba:e1:5c:7a:e3:
c6:bc:cf:6b:56:21:c0:48:1f:a8:42:2f:a3:e4:70:cb:6b:5b:
54:7c:3e:87:6e:02:30:e3:62:70:6e:27:11:47:b9:35:81:d9:
c8:d4:b1:9b:a9:43:36:02:28:4c:ce:86:9c:e0:6e:23:6b:89:
50:62:94:21:9a:e2:22:6c:2a:b8:9f:6d:8c:56:37:d5:f8:2f:
02:85:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:57 2025 by rpki-client