Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: J67tfaIhRjf90TbyddkTLcy8Tv04JUkzjYwTnbTHiQg=
Subject key identifier: 88:36:AC:83:8C:A0:5B:06:D3:4E:33:9E:40:F7:6E:18:A9:13:82:10
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 0194BD179133670E1BE5C97CC9FA4811086B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: 8st1I7MPTxCmlVyDA4+g7hKw40ZiQBeUp9qz6LLD/Ck=)
2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:91:33:67:0e:1b:e5:c9:7c:c9:fa:48:11:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=8836ac838ca05b06d34e339e40f76e18a9138210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:c0:f8:28:2a:ac:4e:29:89:86:24:f0:73:
d4:53:99:12:99:3c:a3:03:66:69:ad:68:a7:c9:0b:
ab:2a:76:11:e3:01:8e:cd:15:5e:d8:64:a5:53:3b:
d0:70:b0:73:d5:4f:7f:b9:b4:e0:f4:7c:28:16:8a:
d1:6c:43:47:ac:75:64:4f:51:6d:62:95:a9:d8:21:
42:a3:3d:bc:ad:43:24:d9:c1:af:4d:4e:6f:5a:91:
76:dd:f7:89:fd:e6:ea:6e:b3:70:d2:64:c9:a7:3f:
ee:18:4b:38:c2:93:fd:38:19:be:0c:36:18:99:0e:
6d:ac:1e:4c:a7:26:df:e6:f3:bf:83:f6:72:46:f9:
84:05:4a:46:9f:36:ca:5e:b9:86:0b:0a:de:11:b5:
b9:1e:8f:17:87:a4:95:d8:8c:7f:33:37:3a:d0:29:
dc:93:d6:0e:6f:c5:ca:26:11:23:6f:b5:5c:b9:74:
c7:d3:c3:0d:8b:ee:e6:32:35:91:bb:af:1a:8d:8d:
12:d9:e5:a3:8c:49:88:5e:b3:cd:c9:70:d3:2c:be:
ef:42:e4:e6:a2:11:80:a7:70:40:98:e3:a5:42:66:
57:e8:d7:c1:ef:06:49:8b:35:c1:9b:36:fd:7c:b3:
0d:dd:44:e3:34:de:c3:35:41:a3:b9:ee:4b:e3:f2:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:AC:83:8C:A0:5B:06:D3:4E:33:9E:40:F7:6E:18:A9:13:82:10
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d0:6f:ea:c5:4d:3b:07:fa:c5:8b:a7:15:7c:56:7e:62:c6:
16:d2:88:ad:4a:cc:f5:f8:7f:6e:4e:52:a2:91:7e:1e:65:f4:
70:7e:e8:99:33:26:52:43:f2:46:58:4c:d8:8d:81:cf:4a:83:
39:c2:d8:34:28:16:07:b6:6f:97:a6:52:d4:80:5c:c2:41:27:
93:72:4a:1a:48:1c:5e:4d:19:1a:f3:a1:e6:33:15:72:b8:1a:
99:b6:68:e6:73:4d:b3:19:c0:d4:9f:b0:81:ed:f4:17:54:3d:
7e:3b:77:05:15:11:72:a6:fd:16:6d:b0:13:46:38:01:99:8b:
38:6d:d9:41:ae:ec:2b:21:46:47:44:f9:56:9b:a1:ea:f7:bc:
59:4b:74:bd:6a:77:6d:f6:98:a1:55:dd:2b:7a:b7:ba:b5:ab:
c8:46:dd:a1:c5:2e:c3:79:92:33:e7:d4:3d:03:9e:b6:a2:d0:
01:d7:4c:10:8c:90:35:08:78:17:08:51:0d:a6:f1:95:bf:bc:
c0:fb:f5:8c:09:5f:33:38:04:b3:b1:b6:f1:41:f8:60:0c:1a:
89:ad:2d:d1:35:57:c8:3a:78:fd:29:c1:d5:45:9b:43:de:32:
27:48:51:0b:d9:65:1e:58:73:1e:c3:47:1f:20:df:48:7e:23:
0d:e9:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:57 2025 by rpki-client