Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: 6RJd6RgMWkqyF3WPwMimStxvID3zuPrNAEoUg4R8CgI=
Subject key identifier: D4:18:FC:09:9D:31:11:36:99:E6:28:F3:FA:26:9F:43:A5:5A:5E:8B
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0194BC72E44393AF11082077350B88D61834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 12D1
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: eRglGWpxPynJqHRv2CbiekbMd38YNuYraF3aazesH3U=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:43:93:af:11:08:20:77:35:0b:88:d6:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=d418fc099d31113699e628f3fa269f43a55a5e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:d9:4f:e5:43:d1:58:56:79:fe:46:a4:0e:
01:94:2a:2f:d5:45:72:f2:4d:4a:e9:0f:19:d1:bf:
ad:f1:fb:48:2c:ed:08:00:6d:59:69:fe:1d:ff:0a:
2a:18:ba:33:f4:0e:dd:c8:e3:0e:d7:cc:ed:48:ae:
6c:0f:7c:87:7e:a8:12:cf:6b:83:32:24:fe:7d:b7:
9f:20:57:be:b7:52:61:75:aa:05:f2:ba:0b:a4:53:
70:a7:b1:bf:2f:f4:17:7a:2d:64:aa:b7:12:53:99:
66:31:95:e5:4d:88:a5:0b:8f:3e:8f:6a:6b:df:0f:
99:ee:01:25:2f:40:d4:12:00:38:6b:05:64:0b:c0:
0e:11:9f:65:e2:de:55:88:b0:89:f4:9e:15:1c:cc:
ad:43:30:59:95:09:08:95:f3:6d:f6:16:69:73:85:
3b:9a:69:73:ab:a5:e9:8b:65:ea:f3:5f:f6:11:a1:
3b:9f:cb:fb:5f:2a:73:72:2d:3b:8d:1a:78:6e:bc:
97:36:dd:e9:ba:13:15:6f:86:06:bf:98:75:30:c9:
dd:23:d1:07:7c:d8:e0:c6:06:1d:c1:e2:b1:1c:c9:
d9:b3:ab:83:80:c7:e0:cb:82:67:12:1d:af:00:b7:
eb:a6:97:91:de:52:03:b1:97:29:67:f1:15:36:7e:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:FC:09:9D:31:11:36:99:E6:28:F3:FA:26:9F:43:A5:5A:5E:8B
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f3:e0:e3:91:6d:46:5b:b3:fc:68:4b:eb:8d:8b:c6:5d:89:
95:24:99:0b:cd:31:0d:6c:9c:c8:46:92:7b:26:4b:ea:06:f4:
36:63:83:1f:c1:7f:22:4d:e4:c7:09:d7:bd:0d:76:16:86:3f:
87:14:6e:9d:ab:14:58:7e:9e:93:ef:07:ab:74:3a:e7:6d:b1:
c7:52:ed:62:91:b1:67:e8:c7:47:52:33:e0:fd:5f:bd:f1:f1:
26:0f:16:23:8b:b6:5a:2a:3c:af:b3:cc:f5:36:1a:55:ec:d8:
54:d5:a9:ad:0e:69:43:2c:ab:fb:b0:6c:dc:2c:0a:5e:2b:c1:
22:21:0b:a5:2b:61:a0:b6:90:35:22:58:d8:a8:27:bc:d4:f0:
eb:3a:ce:82:dd:56:4a:5d:1b:96:01:03:4d:42:1e:2f:3b:2f:
fd:a1:74:dd:08:90:81:8d:c3:2d:f3:10:5d:ea:0f:ac:84:a0:
87:d6:30:94:a4:5f:0e:70:c5:7d:18:ba:44:ea:a7:00:5a:90:
56:11:5f:f0:78:e4:35:99:66:3f:bd:bd:0b:8b:c2:14:8b:67:
5d:df:7c:9d:66:4b:a1:28:2a:fc:ed:f9:c1:b1:b0:52:b8:60:
6f:73:1c:c3:b8:b1:3c:c0:49:13:d2:4b:05:8b:41:ef:30:2d:
ee:6c:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:07 2025 by rpki-client