Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: WKdz0jcnz02HQT0CE9/PrNL3vpOqb85CaqKYS9c32aw=
Subject key identifier: 1E:64:82:66:B5:FC:08:B1:40:B0:E8:24:FE:ED:45:61:74:98:7D:22
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 0194BD4E5125E24AA05868A24393026EB73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 1118
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: gdf5ewMqE71A57cuwQLbLf3Y8+ooXQnhY3kmELTFwiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:51:25:e2:4a:a0:58:68:a2:43:93:02:6e:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=1e648266b5fc08b140b0e824feed456174987d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:48:47:ff:8d:57:68:b9:6d:39:d9:f7:e6:
d6:f7:ac:0e:cf:d3:ef:ce:c3:44:44:4a:e9:47:a5:
32:90:1b:5a:6c:ff:16:84:a0:6c:2e:67:ca:c9:d7:
aa:cc:b9:01:e2:b2:af:bd:26:21:9d:7b:c3:da:f5:
17:44:97:5c:f7:a1:5e:96:8a:98:3b:40:3a:50:34:
9d:c5:c8:54:10:2e:3d:a0:7c:e3:25:82:31:5a:ea:
00:e2:38:a4:49:fb:75:e3:c7:a4:ff:31:6e:68:bb:
31:44:bc:02:2d:e2:18:08:4c:08:43:20:83:99:1f:
d2:46:3f:d6:6a:98:79:2c:08:96:6e:2e:77:ec:47:
06:90:09:c5:38:23:20:0c:07:20:9a:0f:a8:a7:e7:
f5:9e:35:5b:5f:fa:6e:3d:e1:ab:f8:d6:13:00:2d:
96:fb:62:7a:01:ee:6c:4f:70:5f:40:19:21:60:e7:
8e:71:f1:10:4f:f6:80:a1:6a:df:e1:32:3a:45:66:
d9:e7:0b:41:b9:f0:6a:ec:fe:3a:82:5d:fa:86:27:
f2:ea:d5:ed:d1:34:27:10:ac:38:96:aa:00:ee:55:
ef:ff:4a:80:9a:6c:61:33:40:11:ca:5e:6f:69:a4:
ea:c4:2f:cd:8e:02:fb:40:77:65:d5:85:20:7b:d2:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:82:66:B5:FC:08:B1:40:B0:E8:24:FE:ED:45:61:74:98:7D:22
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f5:5f:46:a2:9e:d4:bf:e7:72:87:6d:89:e1:f3:f9:eb:a1:
ad:c6:3d:c8:d2:75:b5:dc:16:ab:6c:50:33:f7:e9:a5:2d:b4:
75:ca:0c:6c:ff:04:b1:f7:04:eb:0d:cf:7d:3d:ce:da:48:b7:
38:24:7c:6a:4d:66:13:8b:4a:1b:2c:e2:33:c6:a5:ac:70:d8:
51:58:2f:31:ad:c8:7a:49:59:4f:60:48:10:34:ea:83:68:e0:
5b:9e:1e:71:c4:a2:ea:0c:94:1b:f3:05:b1:eb:36:d1:b1:0f:
57:fa:cc:09:98:a8:ce:2f:31:4e:8f:14:23:ee:f4:36:fa:c4:
61:9a:8f:4f:72:3c:5a:a2:77:b4:35:f7:df:57:eb:a5:e2:40:
f4:b7:c1:99:c9:4e:b8:3b:ec:70:0f:3e:e3:d6:a2:72:1e:0f:
f0:17:46:e2:cf:6b:8e:54:f4:c4:09:47:9c:9f:b4:d8:e1:8a:
bf:fa:4a:d7:d6:72:38:f9:c7:01:45:0c:ec:6b:5a:a9:0b:a2:
84:4e:45:7b:52:2e:11:8e:eb:e7:7f:74:6b:13:f8:d7:bb:20:
03:1e:3a:47:60:9b:c6:7f:64:e7:0d:c1:ce:4a:c6:3a:c1:b2:
0a:fe:4c:51:33:17:3f:03:db:d1:d0:07:cc:00:58:ab:85:fa:
6d:56:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:50 2025 by rpki-client