Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: 1RI2t0GL8dRzuFGHDnmZHly2rqSfwF5ppGzIrpJoLXM=
Subject key identifier: 2D:75:76:97:00:DC:C0:55:60:8E:8E:0E:54:A8:86:DD:7A:9F:EE:DD
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 0194BC3C96049839405EB9472700BD52B7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: oacjxftlrwfkUPXzijPz8aCGljQ6cKh3I93p/vtH/7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:96:04:98:39:40:5e:b9:47:27:00:bd:52:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=2d75769700dcc055608e8e0e54a886dd7a9feedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:82:2c:64:fa:fd:8d:e8:b1:67:0b:24:d1:
21:a8:71:7a:09:79:1e:4d:00:a7:54:1b:ab:67:05:
1e:ef:dd:0a:a9:73:14:fa:73:75:5f:84:50:3a:e1:
2a:58:aa:8c:93:24:f7:f3:2b:de:f7:4a:f9:fb:fb:
a4:89:cd:fa:ad:34:ca:08:27:58:29:cd:d8:7a:89:
17:e7:c7:a9:23:a4:92:88:2c:1a:28:82:b2:e1:16:
17:81:3c:c9:e1:98:d9:5b:1e:5a:06:00:2d:38:de:
f1:72:87:d8:4e:c4:de:0d:0d:99:fd:74:79:0a:d2:
d3:36:f4:d1:f9:32:a1:cd:a8:16:8f:9a:78:ab:8f:
eb:81:2b:61:64:a6:cb:ab:f2:a7:42:c4:01:24:6a:
bd:91:9c:54:9b:29:bf:b5:47:0f:40:6b:05:86:11:
63:ea:db:aa:15:2d:b7:ba:e0:06:5b:c7:06:59:de:
fa:d5:33:f7:7f:90:00:b5:c8:b1:87:6c:b0:17:6c:
93:88:be:63:34:10:f8:51:7a:5e:f8:2a:ce:6e:af:
ac:a7:ba:23:6a:95:59:ab:38:2f:04:8c:c2:b3:8c:
3d:a9:39:c6:10:72:24:4f:26:4c:b7:cc:78:8a:8f:
88:ad:e5:16:22:78:a2:b5:5a:82:89:cf:80:6e:04:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:76:97:00:DC:C0:55:60:8E:8E:0E:54:A8:86:DD:7A:9F:EE:DD
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:44:33:87:40:f3:95:bf:03:c8:99:73:08:7c:32:db:e1:
bf:d4:01:b1:c7:50:aa:a9:75:aa:ac:99:52:3e:5d:3a:88:2a:
45:9e:a3:bc:f2:b5:19:f7:4c:de:62:b3:8a:70:94:d0:7f:d2:
12:b4:ea:ae:f4:3e:78:6b:51:12:3a:50:d4:56:73:1c:7e:9d:
f0:c4:26:d7:96:b7:e3:7d:cc:33:79:8a:0f:1d:ba:b0:95:34:
5f:38:5d:8e:92:ec:bf:cc:e1:0e:bd:3e:09:0b:43:17:c9:91:
03:71:42:04:5b:c9:bd:a7:ed:4a:6f:7c:25:0d:e2:da:f5:8f:
a3:68:13:84:27:10:7e:d6:87:b2:4b:d2:01:fb:27:b3:03:18:
16:6d:e0:c5:86:07:6d:db:1e:a2:c6:89:75:cf:f3:b6:15:29:
6f:61:4f:d8:7e:be:6a:68:b8:97:3d:28:24:2a:3f:8e:fc:c9:
ed:60:d7:8e:58:78:f4:ff:01:11:84:3a:69:38:32:63:f4:fc:
c2:49:e6:1f:91:85:cc:59:fe:3a:a6:9f:ce:f8:c7:25:04:10:
51:0c:f3:75:05:8c:dc:6c:80:45:6b:1c:c5:2e:a9:96:c9:dd:
e6:0b:cf:9a:d7:6f:ef:73:21:26:d2:24:aa:a2:a3:9a:e3:47:
7a:4c:99:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:41 2025 by rpki-client