Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: iOarHrzrYsPRL52VRz8p1OK7xA+EYMb8YOuOBLMGAyc=
Subject key identifier: A1:AA:D8:CA:32:73:E2:6E:B8:EE:2D:FD:BE:CB:EB:35:42:BF:BC:41
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 0194BBCDF056442544A380F163D4B0BE6A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 1043
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: 9m6irWmxKMhjgmODGpt8P2Z0FyuIh7DPS0HvuVUQfuc=)
2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f0:56:44:25:44:a3:80:f1:63:d4:b0:be:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=a1aad8ca3273e26eb8ee2dfdbecbeb3542bfbc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:e6:5e:7d:05:99:65:c3:7e:fa:c7:91:17:
93:a0:eb:54:e8:21:b8:82:d0:cb:00:ad:4d:ea:a7:
76:bf:70:cc:12:e4:f3:33:7d:ff:6d:8f:3e:95:5d:
a8:df:8c:2e:0f:7a:f8:35:58:4e:0a:13:7d:c7:4c:
22:6a:54:90:f1:2d:09:f5:94:95:cd:d1:de:2f:11:
3e:7c:cf:f7:7c:f4:98:fc:ab:85:4d:d6:83:28:89:
5c:13:80:99:c3:34:87:25:e0:19:80:12:92:ad:c1:
00:bd:be:b5:c0:ad:a1:6f:0f:f1:31:32:74:f6:63:
b9:c0:70:da:42:fa:64:f1:69:ea:71:f7:6b:f5:76:
80:c1:b7:03:8b:0e:f9:09:e9:41:2d:1d:d3:e2:00:
c0:7b:45:2e:cf:b7:b9:b7:2d:2c:75:f0:4e:12:10:
c1:25:58:c4:b9:46:fa:4a:dc:43:5c:ac:80:f3:67:
f3:3e:10:f2:8b:ed:90:43:26:f8:e4:84:00:6f:87:
79:b3:16:34:2f:be:18:bb:9a:bc:d0:57:84:83:e0:
71:b1:9f:23:9f:25:9c:49:84:69:68:f0:c0:96:c4:
24:16:c8:2b:8a:c2:87:fb:db:93:67:75:90:b9:c4:
c1:06:67:78:5c:3c:fd:5a:8a:17:a4:b0:b6:35:d8:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:D8:CA:32:73:E2:6E:B8:EE:2D:FD:BE:CB:EB:35:42:BF:BC:41
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:b3:98:f4:0c:83:ff:70:7c:fa:e5:dd:7d:49:cd:59:95:
f2:f9:18:3c:85:14:4c:d1:93:a3:07:2d:df:cc:f0:09:84:bc:
22:9c:44:28:a1:2f:0f:f1:cb:2b:77:b9:94:34:49:20:3c:81:
04:ce:46:92:fd:3c:55:60:dc:9b:7a:82:51:36:bf:5a:a5:d9:
fb:72:6e:3f:51:9f:4e:67:c2:74:92:b0:d6:dd:93:51:61:a2:
e1:66:81:5c:6a:cc:ba:f7:46:39:e9:a4:25:e7:0c:fb:cb:45:
06:73:3b:35:66:a5:87:c9:88:c0:4f:d4:c0:6a:15:33:e9:47:
ef:e0:35:0a:83:26:24:97:a4:61:2f:75:09:88:31:58:1c:4b:
f3:bf:24:b8:60:fe:29:1c:6c:cc:03:fc:6c:09:2d:bc:68:fd:
48:cd:4d:e5:8b:21:09:65:20:ce:b9:f5:51:b8:0f:61:ff:15:
e6:0e:7b:3e:be:74:4e:28:87:51:c7:f1:46:ff:40:dd:b8:51:
a2:37:ed:11:02:fd:79:6b:c1:02:30:35:15:46:14:6f:52:c2:
55:cb:03:2d:08:cc:00:16:f3:e5:95:96:be:46:77:25:1a:97:
18:ca:cc:93:49:1c:74:15:92:5c:69:63:3b:9a:2c:fc:c5:10:
ff:2d:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client