Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: 5gmr8AAMP3BngOcnfrp3Z+H/cAS9bp/j2j2bS62I//Y=
Subject key identifier: DF:27:7A:AC:67:D6:C0:A1:20:FA:3F:5B:A6:A2:D1:FF:F3:C9:FE:2F
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 0194BD17B166CDA57A484CB86AF5D6166AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: g2OJcRbO4zoljQdcDopn7LT1ecYBlroY3mvF3xjZ7eE=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:66:cd:a5:7a:48:4c:b8:6a:f5:d6:16:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=df277aac67d6c0a120fa3f5ba6a2d1fff3c9fe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:7c:b3:56:a2:3b:bd:6e:8d:90:60:4e:b3:
66:76:76:90:6a:d6:df:dd:3b:49:94:db:a4:2a:33:
6e:f4:58:72:0d:6a:a4:84:9a:e8:bc:86:b8:0f:52:
1d:84:d0:ba:32:17:c3:e3:81:1c:0f:e8:ed:41:d9:
58:bb:ce:84:7a:78:17:fa:84:af:7a:8f:b0:38:e8:
ef:ae:ad:e1:af:d1:1d:95:b3:64:03:f9:ba:7c:05:
84:66:81:d3:69:50:67:9e:16:e6:51:2c:d3:53:31:
3e:cb:4c:d4:8c:7c:76:20:27:44:34:80:bd:b9:f4:
a0:79:10:b4:5f:37:9d:87:ae:44:87:8b:88:ce:4e:
0e:fe:52:bd:1b:e1:53:58:9c:54:d2:b2:26:49:13:
88:ce:94:cf:87:74:51:88:26:f5:56:c1:75:dd:f0:
95:f6:c6:57:75:c8:de:91:10:bf:19:5f:c0:09:97:
70:62:6d:91:42:8d:0d:5e:f9:27:d9:9a:38:ba:b3:
30:d4:1a:07:17:18:35:3a:2f:71:91:2a:a0:df:a5:
2f:13:7d:00:57:d3:2e:37:39:77:a5:cd:bf:95:da:
71:8f:b2:ca:dc:ea:1d:eb:de:7a:70:d8:69:f5:3d:
f0:8b:30:8f:a9:7a:dd:45:95:1d:19:c7:b1:c4:40:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:7A:AC:67:D6:C0:A1:20:FA:3F:5B:A6:A2:D1:FF:F3:C9:FE:2F
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:50:1f:5b:54:62:54:e9:09:54:92:9c:6b:23:f2:31:78:
54:2a:5e:7a:8b:de:bc:27:b7:89:5b:1a:53:c7:f0:29:a4:09:
0d:35:82:cf:a4:74:4e:cc:ae:7a:5a:70:b1:9d:e8:73:e6:70:
4e:65:c8:dd:4a:98:9f:7f:aa:44:9c:38:4f:e0:46:6c:fa:c7:
88:72:26:a4:f9:f6:56:d8:be:66:2c:2b:3a:0e:e3:b8:c0:39:
f6:54:3b:d5:73:85:d3:45:8f:08:b8:59:82:93:ea:2b:ef:e4:
49:4d:10:47:f4:4b:7c:6d:95:ab:0e:d6:8d:eb:77:d8:e4:39:
97:d2:a2:ea:bb:18:33:9d:d0:21:80:45:0e:d4:cb:4f:40:08:
4a:26:4c:8a:19:1f:b5:58:44:dd:64:4d:de:de:75:40:85:83:
06:2b:13:af:72:16:8f:0d:fc:61:dc:ba:fd:6d:db:15:63:02:
00:d2:b8:3d:6c:70:fc:fd:c3:0a:e0:ec:e3:a5:b8:66:db:0f:
94:61:df:dd:04:00:89:c9:7a:4a:78:44:39:18:3a:22:6d:55:
a0:b4:43:6f:44:00:f3:8f:cf:2f:95:d9:64:ed:2c:ac:5a:1f:
ea:37:46:c3:6e:93:19:44:1c:b2:8f:b0:7d:d6:45:e9:37:35:
c0:10:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:31 2025 by rpki-client