Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier: oIu1ZqhfauUFmFS0NILGb3doqUyx+uJQawka8j6OYWs=
Subject key identifier: 10:58:D6:4D:9C:CB:8E:EE:77:86:76:18:55:36:0B:F0:06:BC:80:4A
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 0194BCA9B9E41229C4065F7B5B17E16F0DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number: 0368
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: C2uOLTIBzHwLK45bDp+STMRXQToa0eYSzUJ90tMx0xs=)
2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:e4:12:29:c4:06:5f:7b:5b:17:e1:6f:0d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=1058d64d9ccb8eee7786761855360bf006bc804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:d8:ae:50:16:a1:94:73:d6:6b:99:d4:a6:
d4:85:81:c1:eb:54:9e:e0:fa:47:16:75:b6:4a:b2:
6f:ee:64:56:83:e0:0a:b9:5b:8d:d4:3f:86:ee:cf:
d0:51:b1:28:07:97:36:e7:7a:81:5a:fb:02:88:a0:
51:74:58:fb:47:10:00:5d:27:02:f2:95:b2:cd:8f:
48:05:68:18:23:e6:14:2c:f9:4a:36:91:71:ef:e7:
c0:b9:ce:91:bf:a6:e1:6a:42:99:50:85:18:7d:c2:
fe:42:5a:31:7e:28:f2:d1:6a:ae:8a:0a:b3:6b:0a:
dc:dd:4a:80:d9:4d:88:7a:f3:c2:c6:f3:22:50:cf:
d7:62:95:89:78:f4:4a:6c:74:3b:e8:5d:73:4b:99:
97:ec:c1:bf:c0:c2:b3:b0:06:59:98:41:cf:a9:8c:
e1:48:db:ec:af:57:1e:40:cc:d8:84:31:d9:d9:66:
c8:7b:05:8a:2a:ae:41:f9:65:cf:58:84:11:68:5e:
8a:33:24:0d:cc:fe:34:de:65:90:83:1f:f0:74:c9:
33:14:97:86:b7:6e:95:be:fb:b7:08:e6:35:c0:7b:
d0:94:e5:6a:c3:29:89:eb:45:5c:66:10:1e:07:1b:
82:a1:b8:e4:5f:fb:8f:0e:67:0b:95:3a:e3:41:e0:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:D6:4D:9C:CB:8E:EE:77:86:76:18:55:36:0B:F0:06:BC:80:4A
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:82:bc:95:0a:c6:5f:ff:e9:56:4a:72:8e:07:aa:3f:93:
2e:e9:0f:f8:c2:90:77:97:20:9f:2c:cf:a1:e2:08:1f:3e:3c:
f2:9e:7e:4e:20:32:79:b2:16:19:73:b3:ce:e1:ec:96:ec:02:
26:d3:82:c8:c8:9b:63:a8:12:98:c2:bd:35:7e:9a:79:31:af:
0b:dd:c7:43:c0:93:0a:81:2b:05:46:42:ad:00:d5:64:aa:24:
63:52:83:4a:24:ca:f7:d5:b6:24:99:b0:80:97:c8:f9:dc:85:
7a:ab:84:0f:bc:2d:32:f5:02:53:a3:6e:10:ad:fc:90:0c:d2:
52:82:01:da:55:17:88:43:af:30:de:55:6c:4e:01:1f:2b:a3:
d1:00:fc:1a:23:7c:c2:19:bc:3f:ff:ad:d0:82:85:cd:3b:7b:
37:47:be:b6:d4:77:8e:c7:df:4f:60:cf:0e:6a:e7:31:41:c6:
da:74:f9:a5:6a:85:bb:21:1c:89:30:d6:81:33:81:2b:86:43:
58:a0:ea:8d:1b:32:d3:47:c1:be:54:8d:fd:6b:56:a0:1b:89:
d6:7c:9a:d1:a5:c9:de:d7:8f:9b:43:cf:96:89:ce:22:a8:f8:
7e:28:63:42:c3:99:80:eb:2f:21:7c:0f:e1:ff:51:12:30:28:
02:f0:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:04 2025 by rpki-client