Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: 9ZGBGa7oyn/eYE53PK9kWZMpOWVU7Q/9AjwJ7hzDb9w=
Subject key identifier: 61:63:2C:A9:72:82:E5:4B:66:AD:84:D8:E2:2F:B6:CB:A2:3F:0C:A5
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 0194BCE0B170B550F5B5B7DCB07DA184F555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 11F8
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: dRh0l79+Cgr/nPDQ9DwXJi8BKZYFGX5iC1C+4+RG3Po=)
2: XbAr8SQIAw9hIDRxrHkJyM2E7rw.roa (hash: iroHWOjzxgxeueAoX0u+v44fa72Ny7x8CM3XkM2eFPE=)
3: Y7rjDq7fdynJflZ1cb7ZNg-KFmg.roa (hash: h2vc7Gq/Sd/1Xnjjmm5IRwstIcuks+nnX9YP0dcordQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b1:70:b5:50:f5:b5:b7:dc:b0:7d:a1:84:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=61632ca97282e54b66ad84d8e22fb6cba23f0ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:6b:e9:c0:58:91:06:e7:26:89:8a:b5:f9:dd:
da:b9:85:89:dd:61:0e:7d:23:56:86:a0:c8:57:cf:
97:1c:e9:17:72:46:77:25:79:63:aa:78:6b:f9:7c:
f0:17:69:3f:d6:a7:c5:a6:14:9a:23:24:bb:cd:56:
b9:d5:b0:e2:6c:9b:85:8f:fd:24:20:7e:2c:41:07:
41:ec:60:75:5d:5c:68:69:eb:8a:00:40:c3:d9:fa:
35:d4:0f:54:45:54:39:d7:61:0b:de:5b:3c:27:70:
fe:11:db:bf:02:b1:18:93:0a:c0:93:4d:84:05:b6:
16:8a:9b:b3:0b:a8:12:c1:81:c1:1e:db:b8:aa:a9:
61:60:8d:58:db:f1:2e:4a:63:79:dd:b8:75:92:cc:
a0:fe:9c:ac:63:8c:bd:df:b6:9d:2e:20:ca:c2:1a:
57:d9:92:c7:be:63:24:22:d5:b3:01:41:f1:fb:68:
6d:ed:51:ec:d8:d3:4e:c3:01:2d:9a:22:38:0b:0b:
34:7b:05:76:77:6d:c7:e5:d2:b6:a2:77:91:e2:8b:
e9:ca:6d:e1:bd:7f:5e:af:45:c6:88:b0:7d:06:0f:
d5:2f:88:a2:41:e5:19:39:d8:39:5a:7b:cb:44:91:
0f:66:06:8d:31:47:f8:03:51:15:e2:bc:95:5c:a3:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:63:2C:A9:72:82:E5:4B:66:AD:84:D8:E2:2F:B6:CB:A2:3F:0C:A5
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:ea:d7:81:e2:7b:6e:db:f9:95:bb:3c:6e:31:f9:90:71:
52:7d:59:7c:86:bf:fc:61:94:35:f2:78:58:c1:6d:89:38:31:
d7:2e:e9:92:a2:76:db:b2:88:f8:83:42:cf:75:b4:d9:d7:ae:
fe:04:81:8b:05:63:bd:45:11:22:b8:e9:ae:9b:cc:e5:fc:a6:
a8:69:2e:aa:78:02:be:cf:e8:e3:5f:98:02:fc:e0:05:88:b8:
42:56:3e:f6:9e:a8:89:d4:ba:52:bf:5f:a1:d9:51:b6:ca:46:
40:d0:10:3a:37:ec:99:33:d9:24:7c:55:84:63:f7:3f:7f:39:
b4:c5:be:10:3a:5a:81:ca:56:12:43:52:42:e7:ac:75:24:5d:
04:2f:e5:19:3e:72:67:3b:f0:72:9c:da:3b:70:44:be:86:d7:
33:52:72:38:f4:3b:06:44:e3:de:e4:f1:40:17:a4:ec:d2:dc:
79:1e:6b:54:cc:c3:41:80:87:6c:c6:7b:f7:58:29:9e:c0:be:
07:70:c6:ca:e7:54:28:67:03:e7:eb:cd:80:fd:6e:4c:de:75:
13:e8:d9:2b:39:5e:c1:cb:5e:a9:e1:4c:64:3d:7c:a3:2f:cf:
b8:44:2b:26:dc:24:e7:7f:ca:f6:78:bb:aa:03:1d:d4:6a:44:
bf:dd:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:58 2025 by rpki-client