Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: /H5hMMYU7G2tlWpHYwWjiY25JB1nLaoREFvUXe8IkYg=
Subject key identifier: 70:C3:96:A1:F0:20:78:44:9D:E3:35:08:96:34:DF:3D:2C:E2:73:B7
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 0194BC3C666609A0B337C6CEFC3FAE2772C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: lIB3xCWJrluKgSZqhGe1IyoZsdznMoc787iaN+VlPUA=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:66:66:09:a0:b3:37:c6:ce:fc:3f:ae:27:72:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=70c396a1f02078449de335089634df3d2ce273b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:36:50:04:8a:38:4e:a6:93:49:4c:5f:60:
e1:69:a6:cc:c1:bb:c0:de:12:d9:d3:e7:26:b5:ae:
16:fc:17:a2:0b:ef:01:2b:16:a9:7a:48:7c:63:7f:
c6:59:3c:2e:73:c1:7b:41:93:50:66:c5:7e:a6:64:
90:25:32:0e:a6:83:91:c2:5e:27:d3:d5:0e:f4:6e:
bb:77:03:f5:7a:7c:f4:fe:70:79:dc:dc:e4:8d:a6:
5e:1a:91:ca:33:42:3f:17:36:1f:b4:e5:60:4e:9d:
91:f0:dc:0a:8d:ab:09:8a:68:40:82:46:28:24:86:
56:45:05:00:91:5d:55:e2:1e:c7:09:e9:43:4f:98:
0c:6b:ce:51:54:3b:0d:2e:18:bb:75:21:a3:7f:1f:
56:0d:ef:7f:eb:c6:81:32:83:e9:e6:20:20:bd:44:
7c:65:2d:35:22:47:9e:13:5f:c3:1b:da:9a:3e:9e:
9f:54:88:54:c2:de:54:bb:af:a6:f8:b8:b0:e1:a4:
75:80:79:c5:6c:0b:eb:99:63:43:52:db:fc:8a:0c:
f4:c1:6b:39:6d:b1:2e:8e:2b:b6:6e:13:3d:71:e2:
c8:1f:b1:ff:0c:37:3f:67:87:88:12:ba:d6:ea:b5:
84:00:48:71:72:c4:71:94:b4:9c:4f:8b:dd:4d:d9:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:96:A1:F0:20:78:44:9D:E3:35:08:96:34:DF:3D:2C:E2:73:B7
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3e:01:45:cf:e5:81:52:08:8e:a8:22:95:0c:47:24:1f:a9:
7f:5c:52:0e:59:a6:38:64:ad:ee:be:66:b8:c2:48:96:a0:c2:
49:53:0c:6a:d0:1c:d7:64:76:6a:a8:2f:05:be:4b:90:94:62:
c8:9b:43:d8:e8:80:3d:12:5f:5e:a1:41:0f:ea:4b:4a:dc:48:
6d:83:34:fb:60:ec:d9:72:1c:00:e1:55:54:d3:96:ff:90:81:
e6:e1:fc:a3:db:73:fa:41:55:d9:ba:e4:74:18:f2:a4:b4:fd:
a3:fd:0a:70:5c:5b:39:c4:80:f0:d5:02:ff:e3:1b:22:8b:4b:
7e:5b:4f:44:2f:47:9d:4e:1c:6e:e8:2d:7e:5b:04:7b:dc:3d:
3f:51:81:84:7d:70:58:06:02:21:07:8e:5a:ff:9a:d8:63:55:
e7:42:a1:15:56:e2:31:4f:13:2b:96:ec:e9:09:a0:fb:ee:25:
00:6b:20:a9:8a:28:41:6b:16:e1:ce:18:b0:49:6a:6c:93:e7:
eb:79:b2:36:3f:69:10:07:df:99:4f:58:00:74:74:fe:fc:95:
75:9a:fc:12:cd:44:c0:06:32:ef:5b:a5:d6:0e:b6:72:f6:b5:
5a:76:9e:ba:30:e9:5f:3f:d5:8e:51:b5:8b:bf:3a:eb:2e:24:
5e:cd:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:28 2025 by rpki-client