Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: rq/7R5Fjr090DPQ2LbFGJDNRaCRx5umFOL2NG/az6Tk=
Subject key identifier: D3:DF:D3:69:A2:AE:25:44:B0:8E:0F:D6:C1:D5:00:E3:A5:E2:84:6B
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 0194BC3BE50E6634993D7ACF893DE8749EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: xm8IJ2OuoOmQKo79HMYsOyyLP1dBNEHFX7OHz00/Np8=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e5:0e:66:34:99:3d:7a:cf:89:3d:e8:74:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=d3dfd369a2ae2544b08e0fd6c1d500e3a5e2846b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:01:8c:48:7a:72:67:d4:99:ab:41:9f:ea:
f2:f7:f6:fe:d6:33:9d:76:fb:1d:cb:79:e7:0e:cf:
9b:3a:53:26:42:26:1b:c4:86:96:4a:47:44:bb:bf:
5d:7a:ab:b5:d8:15:97:9d:29:37:d4:54:2f:93:3c:
b7:7d:eb:4e:3c:1c:00:ca:2d:aa:f4:37:6c:d0:da:
e7:30:39:79:f6:cd:d2:85:04:08:cb:11:8b:bb:f0:
e5:51:9a:95:10:45:cb:15:ff:e1:d9:eb:ec:e5:07:
f4:c6:ff:18:b9:d4:f6:33:90:25:03:6c:af:95:7a:
29:c5:7a:75:39:08:45:ba:31:b9:96:1c:fe:cc:d0:
97:9c:a2:a0:0b:41:f9:99:de:dd:32:c5:28:ae:be:
43:ac:de:a7:52:71:e4:6f:01:d5:1a:b6:a1:29:b3:
3b:da:45:3c:47:03:8d:c1:26:7e:34:b2:ed:71:2d:
21:f3:f8:c3:c6:f2:63:2d:08:f6:13:a9:d1:f5:35:
1b:73:50:d5:b4:39:e9:2d:13:29:05:c7:bb:83:db:
06:c0:ef:01:f7:7e:55:d4:58:07:09:6d:31:6e:e2:
1e:e6:03:a5:09:98:da:52:ec:b0:f5:49:db:a2:23:
57:b4:a0:f9:29:a7:a1:52:f2:ae:08:05:2a:d0:5d:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:D3:69:A2:AE:25:44:B0:8E:0F:D6:C1:D5:00:E3:A5:E2:84:6B
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:56:58:bb:4f:5c:fe:97:5a:51:84:8d:29:83:42:e1:a6:c1:
a7:04:33:ac:32:30:b0:e6:1e:0f:62:fd:8d:7e:c5:d5:bf:fb:
2c:59:77:a2:9a:a9:45:92:0e:83:3e:e6:21:74:ff:47:ad:cb:
72:d2:de:4c:b4:c6:18:0c:ec:32:f7:77:60:5e:39:a7:20:43:
69:34:90:1b:e7:98:36:b3:a7:8c:36:42:41:21:cc:09:41:05:
7a:c6:fb:d4:5a:84:8a:70:4c:55:09:06:a1:01:ab:38:1a:c7:
a1:d7:13:5c:27:1f:94:73:ff:dc:d9:9f:04:28:f2:d7:74:48:
e5:d6:4f:71:c1:13:5e:e7:d9:5b:4a:d8:88:87:14:f3:00:9c:
90:3b:72:eb:ea:73:1d:6d:b5:a3:8a:6e:ce:12:ff:61:62:8d:
a8:ad:7e:73:aa:51:b4:40:e1:34:00:87:65:44:58:55:c0:c5:
2f:75:8c:fd:9f:db:9e:6b:1d:eb:a4:a8:00:6a:5c:a3:7d:78:
1c:fc:0f:bc:69:6c:ff:12:78:65:2d:4e:b2:35:93:7e:4f:82:
a7:15:3b:ee:82:79:a0:b7:3f:d7:8e:dc:ee:dd:12:2c:67:39:
0e:78:08:a7:73:a9:4f:f2:80:7f:3e:b6:27:f0:15:90:3c:8e:
3f:c5:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:12 2025 by rpki-client