Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: YvwYBmdwM9H711VsOs8JFAp4P6Ssh6/V5ieaVDJPu8k=
Subject key identifier: 34:75:98:A6:07:8B:A2:5E:7B:75:AB:7C:EA:3A:72:37:BF:A8:87:DC
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 0194BD4E92DA0CCE5D0369A740E8A0C31894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: BE
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: c6SQq3BG12FOlxqiBaWj9hvI1oAAQ8p2pr5odTM9VzY=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:da:0c:ce:5d:03:69:a7:40:e8:a0:c3:18:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=347598a6078ba25e7b75ab7cea3a7237bfa887dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:97:f1:4e:77:31:dc:aa:ae:13:e5:b7:63:
fb:11:6a:04:5e:af:3b:28:7b:cd:f8:a7:91:4c:bb:
db:e9:13:14:f7:a2:c3:0b:af:ed:fb:3e:c7:58:84:
84:20:ec:ef:6e:30:5a:cc:96:f2:10:a0:7e:53:85:
d4:60:01:ba:8b:b7:2e:37:b7:46:e8:6a:b0:55:27:
49:bd:b2:15:74:83:21:2b:d0:6e:b5:08:f7:bf:25:
b1:21:f4:9d:ba:59:3b:4d:5b:6f:9c:2f:51:9a:13:
13:cf:ed:1c:16:86:f0:e0:a8:e3:09:d1:17:cf:dd:
af:0b:5e:79:38:7b:28:f7:c4:8f:f1:47:be:a4:c0:
b4:a2:16:09:f3:65:8b:0e:c6:3c:f3:f5:d4:e8:38:
20:f3:30:ff:bc:39:35:c1:6b:5d:b1:d4:48:23:73:
8c:ee:fa:73:29:af:cd:92:30:4e:1c:7c:e2:92:9f:
48:bf:79:42:6f:30:58:7b:bc:25:fe:33:2a:13:03:
68:ba:5b:92:2c:ff:73:c6:71:07:d5:d4:25:22:f0:
0c:9a:cf:f6:70:25:04:8f:36:75:65:3f:28:9c:7d:
f3:16:61:10:26:8a:27:cc:bf:fe:06:49:c3:16:bc:
e0:bd:80:54:4b:2d:18:39:53:9b:f5:2e:0c:44:7e:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:98:A6:07:8B:A2:5E:7B:75:AB:7C:EA:3A:72:37:BF:A8:87:DC
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:45:e1:5d:27:8a:5d:c8:35:e7:72:d3:c9:b8:67:5b:ec:0e:
a0:03:0c:64:15:c0:ea:65:b7:69:88:68:40:a8:ff:50:69:3f:
7d:56:74:55:3a:bc:52:37:96:aa:ef:bf:e3:4f:03:80:96:1f:
30:28:f3:40:69:bb:e5:4b:85:bc:84:75:af:ed:6d:dc:dc:0e:
cf:f3:07:d5:25:45:e3:79:b3:40:d2:73:f3:6b:7d:61:83:f6:
f3:4f:7a:b7:3e:08:fb:54:cd:20:da:c6:96:82:b6:9c:87:c5:
37:54:2b:ea:71:cf:dd:0d:77:21:85:00:c8:9c:1c:26:e2:bd:
ec:bb:26:b8:c3:d7:60:9d:05:69:82:29:5d:21:be:bd:39:43:
f3:f6:89:4c:51:e4:f6:6c:43:06:66:04:62:33:65:ec:41:f2:
5c:ba:9e:ab:e1:ea:d5:84:e6:4b:e7:1c:34:30:0d:fd:aa:e0:
94:56:c8:ad:19:90:dd:9e:12:e0:3e:a2:e3:98:db:ce:5d:a8:
49:52:19:7f:58:dd:e0:9a:f1:fb:05:92:32:55:ff:a4:c2:35:
31:d8:d1:17:eb:33:17:8c:37:f4:0c:d4:19:59:3d:d5:47:02:
ec:a7:d3:44:7e:6d:3b:af:bb:ea:d4:23:4b:68:39:37:8c:fa:
cc:bb:26:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:14 2025 by rpki-client