Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: D7LAWd+cqteendkph8MhSKYMCMpqUiitlIeyBtOgRpI=
Subject key identifier: 19:84:39:87:72:C1:32:7B:86:0B:82:E0:73:0F:F6:32:03:89:9E:F3
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 0194BD85A2F5D052081725C80FF7877F33B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: wBBXWMRE42BTqirlef2bgUVBFagCNoz0uBEq/yAHaRA=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:f5:d0:52:08:17:25:c8:0f:f7:87:7f:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=1984398772c1327b860b82e0730ff63203899ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:b9:c2:96:ae:7b:88:d3:4f:ad:2d:40:d9:
dd:de:e8:75:0b:8f:82:d1:99:ef:7e:bd:60:54:b1:
a9:b7:f4:c0:67:1e:e5:c6:6a:96:ab:3e:f2:ea:fa:
62:59:17:e6:00:91:7f:9f:f0:d3:d4:68:27:a9:fd:
13:74:8f:06:6d:07:28:a3:c2:b4:30:90:a5:ad:29:
a7:27:a3:ee:0d:9a:40:c8:9c:80:85:c0:f8:f0:42:
ab:18:62:f4:fd:44:a3:fd:bc:d1:98:9f:a4:3d:73:
15:3e:f6:ff:18:9d:91:fc:0e:3b:4d:8b:42:fc:d0:
6f:66:8b:c0:b9:e4:14:d6:93:88:1f:42:6f:ff:b3:
15:b3:93:5d:5e:6b:9d:42:69:92:d0:89:4c:f3:2c:
b8:4e:d5:ca:0c:88:0c:b5:4c:b6:76:b2:68:5f:ce:
76:fd:55:10:15:54:7f:0e:78:de:15:ed:63:92:9c:
7c:19:1d:3e:21:76:b2:38:70:00:61:61:7d:ae:ac:
4a:08:e8:f1:3e:43:e3:8b:73:ad:fb:31:5f:04:72:
05:b8:0e:a6:fc:8b:a9:1a:5b:c1:10:9a:2f:8c:97:
43:b6:f7:3f:0e:38:59:cf:88:7d:36:ae:31:64:06:
b5:21:f4:f3:de:b6:d4:ed:15:13:4f:2c:a5:a4:8d:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:39:87:72:C1:32:7B:86:0B:82:E0:73:0F:F6:32:03:89:9E:F3
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:e4:7d:c2:7e:b3:20:32:0e:3c:0b:55:de:02:fa:64:49:
94:a5:9b:ba:35:54:0e:f0:3a:fc:92:71:78:ba:0b:bc:1b:f3:
b5:32:ed:2f:e3:0f:8a:66:cf:79:ef:21:31:89:27:c6:f3:36:
2b:5c:97:9d:96:cd:50:59:58:17:0f:85:a6:bb:94:44:21:d1:
c8:7b:16:7d:ae:f0:6a:62:60:27:8b:a3:db:72:39:eb:a6:89:
e1:31:5e:4d:b6:29:bd:7e:b8:9c:7d:3e:f9:bc:c1:eb:ee:30:
11:33:75:9c:d4:16:08:64:cc:28:09:cf:f6:0b:46:79:af:15:
8d:7f:0d:2a:09:05:c1:b7:26:58:56:61:a8:97:40:df:8d:c8:
68:da:b5:5c:d2:99:1f:2e:9b:44:8a:46:6d:84:e8:3b:8b:34:
cf:3a:16:52:a3:a0:2f:6f:e7:26:98:ae:7e:c0:dd:04:bd:b2:
c5:4e:f3:63:98:42:c6:cb:02:13:0d:71:53:f2:b1:a8:6a:f5:
33:cd:70:37:8f:36:a9:8f:8d:a1:e0:d2:0f:da:06:ee:0e:d7:
84:9d:fe:a4:1e:8a:3a:c5:43:5a:e7:06:f3:cb:16:e4:bb:a8:
3c:d9:79:cf:28:7a:aa:52:e9:a8:cc:d7:b1:6b:2b:19:12:9b:
20:d7:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:45 2025 by rpki-client