Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: 6Ei+62la8KxLGlS7usYHD0bXK/8+CA0KSuZaAc52WtY=
Subject key identifier: 42:98:45:3E:D3:CA:71:20:FA:CB:C5:F3:E5:91:86:32:A5:47:18:D9
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 0194BD174B118A5B52007E94316515957C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: GiCAOKq6YHokR3S2lXy7FAtuPWmnW9NCJajrPd4kvJU=)
2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4b:11:8a:5b:52:00:7e:94:31:65:15:95:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=4298453ed3ca7120facbc5f3e5918632a54718d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:5c:2c:71:bc:3f:a5:26:ff:50:3d:24:3e:
13:67:1d:bc:c9:1a:b6:46:e8:1e:2a:c9:06:8c:36:
fc:2a:ce:bd:0c:05:63:dc:1e:b0:40:78:72:47:b6:
fe:87:57:41:d5:5d:61:68:a1:56:96:19:ae:29:87:
2c:87:02:9f:03:12:aa:5c:d6:39:3a:be:59:3a:71:
9a:2e:ed:a0:67:c9:2b:c4:e0:0e:22:3b:e6:86:86:
5c:b3:13:ce:f6:8b:0f:be:21:50:c3:3b:15:be:c5:
77:e9:92:41:93:91:43:40:31:1e:08:83:43:4c:a0:
8a:a7:09:0f:88:4f:86:33:18:29:00:2f:e9:e6:55:
8c:4d:de:54:56:52:92:d2:49:5e:f3:ea:1c:ef:52:
49:0a:c8:5c:38:fe:86:ae:2b:6e:ad:b7:41:e5:81:
27:9a:d9:59:ab:d4:77:54:a9:50:a8:0c:3c:74:d0:
de:b4:5c:43:17:9e:a0:e6:c1:95:cc:0d:aa:6f:36:
bf:59:d4:ef:30:43:2d:e7:de:d4:97:3a:c5:db:ed:
7b:9c:5a:90:66:62:0c:f2:f6:76:60:a5:1a:51:a7:
04:87:fa:ef:31:2e:64:4a:8b:91:dc:06:71:c8:01:
1c:09:e2:99:5d:d0:7c:d5:84:6b:61:aa:4a:d5:c8:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:45:3E:D3:CA:71:20:FA:CB:C5:F3:E5:91:86:32:A5:47:18:D9
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a0:0b:28:cb:3a:70:06:e2:cc:a9:48:39:dc:24:6e:dd:9e:
ad:c5:3a:7d:01:f1:34:24:e9:9a:29:31:19:26:00:f8:46:f8:
32:24:80:55:32:4f:00:c5:c0:a3:e3:92:e5:d2:49:ba:b4:d0:
8e:b6:28:10:3a:5a:9a:66:d0:47:80:c2:3d:6d:46:18:88:12:
c9:82:31:4e:0e:ac:9a:7a:52:c5:5b:c9:cb:d2:ce:64:61:1e:
80:69:a0:ce:f5:5e:75:c9:9a:ff:55:49:b0:58:5a:9a:8a:5c:
05:d1:b4:0e:9d:2d:58:59:92:1d:7e:e2:dd:a6:3a:29:fc:38:
29:ee:ac:d5:a1:19:b5:c1:08:7c:60:42:9a:50:1f:6b:f9:8a:
9e:44:53:98:a4:c0:57:a6:29:b9:be:0a:bc:41:81:7f:38:c0:
04:9e:32:26:06:9e:c0:ac:60:c6:09:21:e0:f5:8a:df:fe:d6:
d6:d5:33:5a:ea:72:03:96:df:5d:19:5b:75:17:14:ac:d8:74:
7f:98:9b:84:f3:4b:8e:62:31:8b:a0:25:1d:8d:9b:2b:3f:31:
d0:96:82:eb:0d:17:d7:05:24:25:d7:b4:be:68:4d:24:df:05:
7a:11:16:19:ec:2b:29:86:e7:27:6d:99:1f:27:23:59:17:1f:
03:e1:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:28 2025 by rpki-client