Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: 4MjQbA7oD+/jKU84oA0kCdqQGVlPaPQNfczp1q+eWew=
Subject key identifier: F2:6A:55:B4:76:A8:2D:D1:5B:D4:2A:9D:F0:B1:F2:58:8E:D3:94:E5
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 0194BD8592AF0E582A79159DA4A5E69A3CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: dVP/ypJDu6tyoHgilb1o9Cb3XdGcqsxTVo+Uv2LhPNs=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:92:af:0e:58:2a:79:15:9d:a4:a5:e6:9a:3c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=f26a55b476a82dd15bd42a9df0b1f2588ed394e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:aa:c8:6b:9c:9c:6d:9c:e3:bc:3e:00:92:
8c:2b:65:cd:07:f1:c8:9a:10:62:59:a7:7f:5f:33:
31:7c:84:44:ba:21:f1:d0:35:f4:5a:b1:fa:82:a8:
eb:cb:c4:5f:38:44:71:b2:dc:82:3e:92:8a:d3:dc:
40:db:34:e2:95:14:08:93:29:10:a8:28:f7:fd:46:
ad:4e:81:f7:55:a6:38:76:c5:58:a8:87:c1:9b:87:
92:fa:35:0b:4f:83:ea:8d:76:02:db:fe:1c:19:75:
82:c4:8f:1c:a9:c6:c4:ed:31:4c:69:34:bd:a4:d5:
67:a1:03:81:f3:a1:32:27:b8:1d:eb:34:6f:81:a5:
2e:71:c9:4c:99:44:bf:c3:a4:be:0b:10:f6:14:a5:
aa:c6:a8:a3:e5:c7:17:25:f1:e2:3b:75:75:33:7d:
17:f2:ab:1b:b9:72:bc:70:ca:b2:23:ba:61:99:79:
a9:9f:dd:74:50:f8:9d:b3:2e:0a:59:a7:ee:66:20:
28:5e:ae:66:08:e7:28:25:c5:63:c3:cd:c6:17:2e:
dd:c4:c7:b9:4a:37:f9:6e:ad:6b:9c:eb:36:ea:ae:
a3:46:d5:82:8f:89:ee:11:ea:3e:5c:b9:c5:23:58:
08:85:5e:6c:91:66:a1:ea:0c:d4:5c:cb:ba:de:d8:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:55:B4:76:A8:2D:D1:5B:D4:2A:9D:F0:B1:F2:58:8E:D3:94:E5
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:3f:55:c4:7b:af:b6:22:73:c7:74:ab:5b:34:c8:59:01:
c7:fd:e1:6e:25:86:bf:9c:e7:6d:4b:6e:b8:aa:41:53:33:48:
a7:59:a2:8a:40:3a:5e:ae:c4:53:40:0f:c3:2b:08:b1:ca:34:
1d:86:65:b2:d3:10:8d:1c:e0:ec:90:88:d6:21:de:be:9a:21:
89:a0:35:c4:9e:1d:b5:34:ad:02:25:72:bf:f9:5c:8e:73:5b:
ff:72:c4:5f:b9:c0:2a:8b:29:70:a1:96:be:39:37:ca:a2:41:
2c:c1:8d:f7:60:e2:1f:a3:1a:d2:b9:35:f9:8e:23:fb:22:fd:
f8:6e:a4:4e:a9:44:06:cf:db:ec:55:60:d3:22:41:83:ad:95:
c3:93:6a:7e:86:b5:ce:77:9b:ef:16:41:a3:42:ce:ca:7a:0a:
a9:ea:24:07:46:e6:fa:27:17:2b:72:a2:d3:59:ef:b6:77:52:
ec:d0:ea:de:7a:1c:62:78:4e:99:e2:b8:18:84:26:dd:8c:6b:
0b:99:b6:c9:2f:81:c9:95:d5:9b:01:8c:3c:af:38:d2:0c:da:
24:af:a8:6d:bd:78:22:6d:eb:71:ee:ce:f0:23:88:eb:4b:61:
e5:4e:86:88:4c:7c:ca:0a:13:5e:4d:1b:86:18:5f:72:22:06:
2d:64:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:55 2025 by rpki-client