Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: dcvJex9Q4MZwLMPFZGtErqSrmG5dEl7WmevG9KZ+40s=
Subject key identifier: DD:0D:1D:36:E5:AB:D2:77:88:68:E0:7B:81:A1:57:58:71:1D:C1:80
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 0194BD4E614D4309775256F827A4DEDFC8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: DkxNH+OSmwfoa7OLIlvSfYrOZPRHahIzbOXI8VHHxE4=)
2: SRL2XQIBoKefODwi32v5f2eOog8.roa (hash: Dn7L+HcQU8DFcaAaO+5zWbM9Yhm50QvkCe2vCWCUn7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:4d:43:09:77:52:56:f8:27:a4:de:df:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=dd0d1d36e5abd2778868e07b81a15758711dc180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:4e:fa:81:0f:b1:85:00:f5:d3:e0:2f:6f:
63:b1:8c:f9:f4:a9:6d:09:07:77:d7:a3:c4:bc:f0:
0c:16:7d:06:fd:20:e1:0d:90:5f:bf:8b:ff:30:44:
a1:c9:73:0a:4d:3c:45:ed:8a:11:6b:9e:16:16:21:
63:cd:0a:09:48:b7:32:04:7a:62:e1:51:6b:88:17:
62:ca:51:55:e5:06:8b:de:39:07:eb:4f:d3:b0:c3:
67:66:09:bf:4a:d9:5c:cd:ea:04:e8:ea:2f:7b:bc:
43:1c:20:1b:ab:70:24:80:4a:de:c4:c1:5d:97:e9:
23:bc:2e:00:a9:5b:e1:19:4f:07:c6:3f:fd:70:9b:
3e:ff:e4:b5:e0:3f:98:aa:e5:8c:8c:4d:e4:bb:b6:
2b:df:ef:06:98:2d:5a:5a:9c:43:0a:ff:45:e2:c3:
d0:30:7d:c9:19:1a:6c:9d:f5:7f:4a:9d:1c:36:b5:
c1:50:07:cf:e0:d8:2b:72:e6:04:ee:87:d2:62:60:
cf:b3:13:4b:d9:ea:bd:a6:fb:d3:41:4d:ae:2d:40:
6e:58:e7:f6:87:d8:19:80:44:d4:bb:39:26:07:b0:
e7:01:c9:46:7f:0f:63:b1:d8:dd:03:26:3b:dc:0b:
a8:10:77:62:19:0d:31:d9:97:83:d6:00:66:99:c4:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:1D:36:E5:AB:D2:77:88:68:E0:7B:81:A1:57:58:71:1D:C1:80
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:36:af:11:2b:bb:97:0c:b2:64:f3:a3:71:8d:7f:d6:48:c8:
30:43:0e:61:0c:2b:ed:5d:e4:29:ca:4f:31:d3:8d:c0:25:f4:
27:ed:aa:8d:08:44:bb:01:22:51:fd:8e:72:4f:0f:27:0d:b2:
27:c1:77:9c:a2:9a:49:b1:d4:8c:2f:5f:b3:d8:9e:2b:d2:cf:
40:42:26:c8:88:34:69:e8:c9:20:d4:45:7c:c4:ec:4e:74:da:
72:d7:67:68:0e:8c:4d:1c:53:ee:d7:22:19:96:24:a5:76:1e:
66:ff:e3:c1:c3:3a:c1:f4:89:7f:c3:57:01:1a:00:c0:36:4c:
4e:ca:ce:b9:5a:e2:6c:05:2d:c1:c6:86:2a:3a:01:2e:08:fd:
c0:83:9d:b8:3e:97:18:9a:ab:3a:5f:da:a3:74:d1:46:05:ab:
02:67:bf:1c:71:b9:00:ac:7d:7a:6e:d7:f8:da:88:e6:5a:15:
af:2c:86:2b:cf:70:84:a1:a8:fe:f9:1e:8b:67:cd:36:03:34:
ca:af:ef:73:c1:1f:aa:b1:eb:37:97:01:1f:79:ed:b7:89:9b:
0f:09:bb:f5:50:af:92:84:64:b3:91:86:bf:26:48:36:71:2d:
3e:b1:3a:76:5c:9d:43:a6:36:d3:43:0e:2f:04:7b:65:e9:a8:
69:eb:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:36 2025 by rpki-client