Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
File: 1kBlpUFdmUI5AUXyJHkB2TZFidc.mft (raw, json)
Hash identifier: p90If2N1AOntYMfRKvbQYmcZqEne7XwjJ4YvJNMdimU=
Subject key identifier: DA:A3:47:6A:D6:BC:4C:32:FD:ED:97:DC:35:EE:21:3D:AA:3F:58:DA
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 0194BC05185C885FA6DC08B1ACBEDF18CDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
Manifest number: 08FE
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 1kBlpUFdmUI5AUXyJHkB2TZFidc.crl (hash: uoCNrN4WimeD8UlUeVXfYSMvYVzF2QfI9KQ54j/ramo=)
2: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (hash: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:5c:88:5f:a6:dc:08:b1:ac:be:df:18:cd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=daa3476ad6bc4c32fded97dc35ee213daa3f58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:84:75:b0:44:9f:55:24:1f:a9:ee:da:74:
52:10:cb:03:0a:ce:07:5f:04:f1:88:67:bd:12:51:
ac:de:a6:2e:30:10:9e:5f:23:5e:d1:5b:d1:03:a7:
54:83:e6:94:81:68:56:ae:1e:6d:e5:f8:4e:ce:b7:
5c:c6:f3:74:42:4c:3f:86:6d:16:b2:0c:88:ca:54:
b7:a6:e8:17:7d:23:c3:f2:dc:13:85:36:5d:8e:15:
26:16:7f:08:74:cf:37:15:ef:d4:70:03:92:05:3c:
4d:d7:f4:72:0f:cb:83:1b:16:6a:ac:42:ed:36:ca:
d2:dc:ef:2f:7f:67:b9:88:ff:c9:dc:21:24:16:16:
2c:21:7e:14:d5:2c:f5:66:ab:d1:dc:ae:9c:d8:7f:
79:76:68:f6:df:f4:a3:12:7c:21:66:84:2c:34:3a:
ea:0b:d8:5a:b5:df:14:09:98:7d:65:2c:03:2b:d3:
04:3e:c9:dd:52:24:f6:d8:f6:bf:53:28:55:24:8c:
6f:12:b8:e8:d2:0a:86:a9:c8:f6:fe:19:1a:60:15:
f0:73:a2:89:e4:04:e3:90:4e:20:0a:cb:1e:68:8f:
61:e4:ee:74:48:7c:48:ce:73:b7:6f:21:33:9c:28:
05:6e:ce:8b:b8:32:18:4d:ad:d5:ff:3e:e4:2c:9c:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:47:6A:D6:BC:4C:32:FD:ED:97:DC:35:EE:21:3D:AA:3F:58:DA
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:eb:25:7c:86:e1:3a:8b:a5:ce:2b:d3:d3:de:0f:c1:15:
dc:67:61:e7:78:a4:f3:e9:d9:53:ee:ec:3f:86:fb:7e:3f:ed:
95:e9:f2:29:ff:bf:f9:d3:b0:02:df:68:05:46:23:6e:13:d0:
82:6d:eb:86:f0:79:84:78:93:a5:df:e3:da:a8:58:82:72:be:
d9:4a:f5:5d:78:43:3c:e4:24:1a:f2:2d:1d:8d:6a:ee:60:b5:
5f:1c:a1:14:08:72:bf:33:b3:e5:b4:10:a4:90:81:46:88:19:
83:f9:d5:90:89:24:52:8f:cf:38:8a:75:39:f0:2f:e6:1a:e0:
27:62:6b:41:9f:35:ae:15:2e:cb:26:48:b9:8a:49:ec:b1:6c:
11:88:d5:de:c3:3c:11:87:b5:a5:62:ce:55:a8:ee:03:40:b4:
ec:08:a6:81:d3:2e:d6:99:70:f5:2a:b8:73:7e:c0:48:b1:9a:
bc:de:1d:91:4c:a8:2f:b0:bb:57:02:00:1b:7c:2d:ca:07:bc:
61:0c:63:61:23:d9:b6:3f:c5:1a:be:ee:1f:3d:ab:06:f8:36:
e5:ba:fd:f1:d1:19:40:51:9d:0d:2f:81:a1:57:f6:3a:88:5b:
f9:bf:4e:b9:8e:39:78:2f:7b:c0:97:4e:95:c7:a0:3f:2d:95:
12:7b:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:16 2025 by rpki-client