Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: vYL92w+LuifzsJdsJadJtSd3XA7x86tt/G3K2szuICo=
Subject key identifier: 4F:78:4F:6A:93:AA:2D:3D:16:D1:BE:97:63:67:D0:4B:9A:4E:FB:F8
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 0194BC7294FDE3A7937ADF6DCC1B4E9B4C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: ujYBjry5Q71XuTw/C/B347p1GNkzpgvQjlJgVrgYa1k=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:fd:e3:a7:93:7a:df:6d:cc:1b:4e:9b:4c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=4f784f6a93aa2d3d16d1be976367d04b9a4efbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:74:33:3e:9d:d1:0e:43:1f:3e:c7:de:57:
65:13:02:73:64:8d:04:d7:61:27:59:72:92:72:ea:
3f:03:5f:ea:b2:cb:0d:68:27:73:c6:b6:83:46:d1:
ba:fc:49:1d:d4:6e:b0:fe:30:ae:5c:d4:af:01:0b:
b2:40:8b:9c:1e:4f:bc:57:95:ed:f2:23:54:d0:8f:
43:89:d7:42:98:9a:94:fe:1c:a4:46:a1:8c:ef:2f:
db:8b:0c:5b:bf:97:c1:67:29:bb:e5:b0:39:f2:9f:
d5:50:ae:93:be:d3:3e:d8:7b:a5:33:c4:50:24:34:
c6:87:ef:6a:88:7d:5b:02:5a:e8:be:4c:f2:1d:61:
b8:db:1c:02:2c:ea:9d:91:e5:38:7f:4d:9e:c3:02:
a4:9c:7d:53:d9:3c:ff:be:35:00:18:26:99:ad:9d:
47:e6:b1:fb:7a:95:d0:0a:41:d6:52:a4:d7:55:12:
70:43:08:7d:01:1e:05:6d:81:38:ef:2a:33:be:a3:
5b:26:55:45:2d:e3:f1:89:c7:8a:a4:99:a4:2b:f8:
fe:e2:d9:a6:aa:40:31:db:28:9a:16:cb:89:f8:a8:
77:8b:87:a5:9d:b2:f9:e3:64:8a:3b:f6:c0:19:2b:
d6:1a:dd:94:a8:a6:ea:3f:1e:39:5b:da:15:25:64:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:4F:6A:93:AA:2D:3D:16:D1:BE:97:63:67:D0:4B:9A:4E:FB:F8
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:59:ad:d2:d2:06:b7:35:42:52:ba:b2:0c:bc:63:27:79:45:
97:9e:e7:9d:8a:ca:8e:85:15:1a:f4:6d:5b:74:7a:0d:9e:ea:
70:64:c7:1e:3b:41:e4:0b:e3:20:a8:7d:f9:26:57:d4:95:da:
60:9e:29:30:0d:69:2e:80:70:31:1d:a6:df:a9:9d:0a:e5:d2:
8a:31:6e:cd:d5:2b:5c:bc:5e:26:15:be:ee:07:a3:f3:0d:ff:
e9:6a:24:15:d0:f7:a0:55:30:54:93:28:16:69:e1:34:98:e1:
a4:b2:fb:33:2e:1d:cb:81:f7:cd:65:01:68:55:98:a1:99:3e:
cc:ad:d3:c6:6b:bd:1d:e3:8f:fa:84:1b:74:29:b4:51:47:40:
a7:35:91:cf:7c:27:fc:bc:14:df:ff:4a:c9:65:e3:79:3d:25:
e0:32:4d:e0:2d:4c:ec:48:44:f4:c0:37:3b:5c:38:0e:66:6e:
96:0c:44:ef:88:b4:76:e9:25:87:09:c4:44:ae:56:7f:a4:40:
24:65:be:c3:57:4c:4f:a7:4a:43:f7:c6:86:f6:8d:57:70:a2:
8c:fb:84:8f:c6:75:e2:b0:e7:3f:62:7d:d3:b1:05:ba:c1:9a:
6b:bb:6e:39:db:fe:50:c8:a6:bb:4f:36:3b:2d:10:40:af:39:
5e:8f:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:58 2025 by rpki-client