Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier: wiyWUmqI9lcshdtnuXGSyclqFw6jtpe0dwLu21pDEYs=
Subject key identifier: A0:A7:AA:45:F4:62:C3:C5:10:C1:E1:14:14:FB:02:6C:72:1E:A3:B8
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial: 0194BC3C4E889F569A99EC1A18AA0A18DCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number: 0F3E
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: A1U4Kuro1gw2f7sYh8K6eKLYpJQCMWlZonF+P3RW4Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:88:9f:56:9a:99:ec:1a:18:aa:0a:18:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=a0a7aa45f462c3c510c1e11414fb026c721ea3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:f7:cc:53:d2:71:26:38:4d:af:d7:70:ca:
8c:e1:71:97:7a:fc:27:ed:26:87:26:f3:c2:4b:bc:
e7:80:eb:b9:73:5f:82:cd:17:e8:73:fa:90:fe:30:
10:41:14:b9:23:d2:a1:90:d2:e3:ee:5c:82:bf:47:
32:f5:eb:f8:69:6a:26:63:fa:6e:0a:ac:3e:14:69:
8f:c8:e7:f5:b0:2b:50:3c:11:33:6f:17:03:20:1d:
d8:15:24:c7:32:bd:06:73:e1:25:c3:ac:c0:28:d0:
ce:f5:60:e6:c4:87:89:9f:1a:be:9c:67:16:e8:33:
fc:29:33:54:c3:f6:27:84:1d:0d:36:e7:2c:47:9c:
c5:49:da:85:22:b6:c6:28:ba:f1:dc:fc:40:51:ca:
e3:9e:a1:c0:7b:c4:08:53:d3:80:0a:f6:50:1c:e6:
bc:70:a1:c3:f7:44:13:50:c4:62:94:df:8d:ec:ca:
02:79:19:88:cf:99:4f:db:0e:d8:bf:52:42:b6:c9:
8b:83:74:5b:4f:cf:5e:6d:fe:7c:b0:4b:e4:47:ce:
55:f3:8d:4b:85:82:63:24:c7:d1:f4:8d:e6:9a:e4:
c6:21:bd:b5:91:55:dc:2b:b5:7a:e2:d8:71:5b:a2:
f6:1e:8f:dc:11:6f:a3:16:b0:25:3c:18:db:fe:2b:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A7:AA:45:F4:62:C3:C5:10:C1:E1:14:14:FB:02:6C:72:1E:A3:B8
X509v3 Authority Key Identifier:
keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:82:4c:43:1b:68:ab:01:d7:08:b0:52:a5:ab:b8:d2:a3:d3:
e2:e0:37:0b:34:15:74:e4:0d:ea:20:a2:5c:0c:ac:50:1e:3d:
04:08:35:f9:ad:ce:37:f1:c9:f0:39:ea:64:3f:13:88:ed:ba:
57:66:cd:27:7c:0f:a1:22:11:ea:93:cc:c8:35:db:de:97:3b:
78:2a:ad:13:c8:f5:b2:5e:a1:a1:49:dc:88:86:63:b0:78:88:
b4:55:26:ad:04:ac:46:49:d7:2b:f6:e3:2a:40:be:5c:b3:a3:
4c:db:f9:0f:4f:b7:93:f2:ea:b4:76:71:65:3b:66:b3:f4:30:
07:1e:52:f6:72:93:f0:61:15:21:87:92:e7:7c:cb:2c:b4:89:
45:38:37:a1:3c:67:f0:d8:a8:38:71:f2:db:5c:24:5e:45:cb:
98:5d:4c:e2:dc:f8:7b:36:cc:87:d6:b5:49:18:4e:2b:08:95:
12:1b:9a:15:55:d5:7e:5d:5f:4f:0e:da:27:0c:f2:2b:48:7f:
85:19:77:91:b9:9b:18:e3:e6:db:f8:20:92:87:53:46:9b:f9:
0f:65:92:55:0a:31:27:0b:4b:60:91:f7:4e:36:6a:3d:a4:f8:
22:bb:0f:46:ac:98:bb:8f:8d:a3:4f:c6:87:40:7e:dc:4e:84:
6d:84:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:04 2025 by rpki-client