Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: w8M5YeKmXpskpqlLkihbuI4e3xX1DuK2IC4gpMnTsyM=
Subject key identifier: 90:7D:51:7A:65:65:5D:45:85:DA:6E:03:1E:5E:44:C5:2E:0D:7D:60
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 0194BD857BC8C24B42ED80BD076A05E55005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 038A
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: C7AquU5zISHxsEu0vLrjBEPfJG1ALoB0Bm7+pnu6huQ=)
2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:c8:c2:4b:42:ed:80:bd:07:6a:05:e5:50:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=907d517a65655d4585da6e031e5e44c52e0d7d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:ce:35:8b:85:a0:9a:cd:c4:b0:ec:33:15:
70:c8:4e:42:a9:b8:d5:55:f8:72:64:ef:cf:81:2b:
36:be:67:30:0c:35:1f:f1:a8:91:3b:94:85:1b:c7:
51:7a:d4:56:16:ca:6b:32:82:df:9c:24:58:ff:aa:
70:4e:b7:76:dd:65:6c:19:29:de:54:de:74:76:ff:
da:ff:a0:41:53:d4:68:e0:71:26:a7:03:6a:6e:16:
7b:77:f9:48:3d:80:ac:19:ec:d0:a6:1a:c3:37:91:
50:98:37:da:26:44:b3:bb:9d:9f:ca:10:31:b3:a4:
b7:9f:72:cd:70:d1:88:58:5a:41:72:7e:81:0d:7e:
be:e5:c3:86:e4:5b:32:ac:d6:58:15:8a:33:b9:54:
a1:b0:d1:f6:20:67:d4:57:d1:91:ed:9c:42:ea:e9:
97:b0:35:48:88:97:ee:f0:e8:7f:b2:11:3b:9c:d9:
d8:d0:7e:f6:74:3e:ca:ba:52:f3:3e:39:e3:0a:cc:
06:30:af:f3:0b:cd:0e:3e:ff:fb:d3:d1:80:b1:bd:
aa:5a:93:85:5e:cd:e3:a5:83:55:f7:f7:50:cc:37:
86:0d:45:48:a9:93:d9:a6:7b:63:fb:c6:a8:0f:4e:
20:52:79:59:07:82:f9:5c:83:44:93:ad:1b:a0:7a:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7D:51:7A:65:65:5D:45:85:DA:6E:03:1E:5E:44:C5:2E:0D:7D:60
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1f:01:a7:47:c6:13:81:f7:d7:79:b2:18:21:c5:dd:77:2f:
ae:c7:83:03:6f:68:88:16:79:42:47:fd:16:d9:d3:9a:81:05:
8d:d3:6c:5c:f0:6f:86:6e:79:8b:2e:cf:a9:d0:c5:0e:f1:30:
9a:31:a2:f8:4a:03:1e:a1:b7:9e:99:f3:d5:99:fc:2a:30:65:
87:15:58:3c:62:c7:f3:36:f8:27:79:2e:65:58:ee:61:79:6f:
f8:c0:dc:73:db:1d:7f:ec:ef:31:6c:a2:31:c9:6b:21:6a:02:
68:ec:8c:51:92:cc:7f:20:9e:13:a3:96:c8:4f:8f:18:5e:64:
37:a8:25:21:61:1b:be:28:67:cb:26:d5:0f:55:24:6c:a7:e0:
3c:f0:c5:9b:56:27:bb:72:4b:75:ca:bf:65:8b:06:05:f4:f5:
8b:8a:0a:06:d6:9e:10:de:c2:8c:10:72:00:45:39:e9:c6:e7:
5e:3b:43:1c:e2:04:fc:ce:a2:89:e4:b6:a5:cd:e5:53:2e:50:
99:e9:a4:fe:47:71:7a:26:3a:eb:e5:60:53:4d:49:45:59:1b:
0f:7f:b2:c0:e4:82:d4:52:8e:c3:b7:a0:68:2e:13:94:b3:7e:
bb:df:45:52:76:7f:f0:41:36:39:70:d0:4a:19:94:37:42:83:
90:e7:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client