
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
File: 36xiikxcxuVw9PQcTg1jlUkbTX8.mft (raw, json)
Hash identifier: pPQKUzsE+qVxFpYMxMCxASzttXzvu2VeJwBRJzBinyE=
Subject key identifier: 1D:E2:8E:83:F7:39:FE:F2:19:59:A7:D8:FE:9E:67:D3:3A:5C:32:2B
Authority key identifier: DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
Certificate issuer: /CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Certificate serial: 0194BCE0E4B1BFC2C2C9E27AED9373A88F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 36xiikxcxuVw9PQcTg1jlUkbTX8.crl (hash: 5p8oA47XZFhQDWIwzK+0Mt9F3SX4SRDZR7+dBdn4PyQ=)
2: 7JS41vM91mOZftvqn8jPBmhbJuk.roa (hash: aROAKgddtydWzjEbRgk4taCxbXsDkr5HWG29W6Kls8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e4:b1:bf:c2:c2:c9:e2:7a:ed:93:73:a8:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfac628a4c5cc6e570f4f41c4e0d6395491b4d7f
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=1de28e83f739fef21959a7d8fe9e67d33a5c322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:9d:35:83:b7:09:b8:a0:48:79:be:15:7e:
1c:40:cf:2b:bc:da:d7:84:d9:d0:45:b0:c4:d9:95:
22:c6:dc:e7:ba:88:19:94:75:25:31:4e:b6:32:18:
73:d4:13:f0:fe:22:d0:50:44:6f:c1:4a:5b:de:c4:
5d:84:ea:a7:cd:7a:1a:f7:29:92:17:6d:fb:7b:56:
6b:98:67:f5:b2:f9:6e:e6:b2:1d:2f:38:5f:e7:f7:
94:c5:47:f6:fe:d9:d4:34:07:e0:0a:9a:c3:d7:0a:
a0:c3:26:ce:80:0f:ad:a7:ad:71:d2:f9:84:c4:31:
c0:ac:8c:6c:97:ce:db:e2:01:e0:1b:04:7e:0f:43:
9c:a5:23:a9:b6:1f:c1:7e:21:ee:31:fe:4c:79:df:
88:1d:3a:94:d6:a9:e3:b9:9f:9b:c7:ce:3a:ee:8d:
47:16:22:88:2e:af:b4:0c:9b:de:06:84:36:4d:88:
05:d4:0e:df:68:0a:ca:97:92:03:68:25:47:39:18:
65:74:b0:08:37:53:31:ce:d3:6b:8a:14:cb:b9:cf:
60:bb:6b:cf:57:bc:48:60:d6:5d:10:49:df:18:db:
a1:f4:6d:5d:f3:c0:9b:34:84:a4:78:16:47:8e:f6:
32:ed:00:f2:7c:e6:2c:50:73:7b:2d:4c:94:c9:f1:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:8E:83:F7:39:FE:F2:19:59:A7:D8:FE:9E:67:D3:3A:5C:32:2B
X509v3 Authority Key Identifier:
keyid:DF:AC:62:8A:4C:5C:C6:E5:70:F4:F4:1C:4E:0D:63:95:49:1B:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36xiikxcxuVw9PQcTg1jlUkbTX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/080bf2-7b2e-465e-ae9c-c4adbeb5adc0/1/36xiikxcxuVw9PQcTg1jlUkbTX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:28:be:cd:21:b3:47:90:a9:c8:5b:04:4b:7d:43:99:f1:84:
ba:80:75:3a:69:2e:bb:b4:19:0e:9d:db:1b:d2:b4:26:c1:0f:
93:0d:2b:59:2d:ee:40:e5:4b:fc:9b:e8:b2:53:09:ab:a2:61:
40:15:c8:30:8a:6a:02:1d:ea:8e:68:82:d6:c1:fd:96:66:c6:
d0:a8:17:ee:f0:4e:c3:2b:18:8d:ed:e6:3b:6e:0c:44:f3:90:
8b:f8:1a:06:99:a0:73:c4:47:09:c1:33:13:2b:0d:2c:bf:4d:
45:22:30:73:c0:92:ef:46:a6:44:37:94:2b:b8:b9:32:a5:32:
94:2d:20:1b:9a:1b:e3:1a:a5:56:77:1f:9a:47:d1:dc:ce:8f:
a7:d0:11:79:4c:7b:38:72:0a:58:f0:20:5c:f6:51:a1:dd:cc:
a6:96:a0:ba:ff:01:13:0f:1b:bf:8d:c6:58:a6:1e:2f:4e:79:
90:81:bc:23:7b:d0:34:e9:55:c3:ad:32:b0:2e:da:c6:48:07:
7a:9d:07:81:44:a8:12:bc:bf:84:89:0a:0c:1b:3b:c8:17:0b:
46:7d:aa:26:e0:da:6f:d6:57:04:23:d6:53:03:e8:ff:63:be:
71:46:8b:4f:af:ac:18:59:1a:22:15:2c:b8:bb:1e:8e:3d:e4:
0f:21:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:24 2025 by rpki-client