Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: mVH9rzWvp991ERR6D3ONQUsvewMgvp7lDtS/Pro3SCQ=
Subject key identifier: 9A:B5:3A:43:8B:B7:15:4B:41:BB:34:2D:E7:AF:76:C7:24:FB:23:B1
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 0194BC04E56EFAE26011C84A2E4E2D5291B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: RjNy7OPMh8TorxFzgOO7r0Z0/YR93gfuhQvQtM4NDjs=)
2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e5:6e:fa:e2:60:11:c8:4a:2e:4e:2d:52:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=9ab53a438bb7154b41bb342de7af76c724fb23b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:b6:0b:e1:17:22:84:42:14:f2:ad:1b:47:
0e:df:99:9c:2e:09:bd:a9:eb:0c:86:83:83:e1:05:
6d:4a:37:1f:ff:1b:e8:cc:b5:94:6d:ee:44:c6:00:
92:67:08:fc:d6:4a:76:58:0d:1d:a5:cc:41:ae:22:
ad:4a:1b:c9:db:37:53:f3:7d:96:eb:76:74:d5:40:
e8:05:c8:43:f9:91:8c:0b:60:5e:9e:d8:ab:2d:5d:
a3:ab:c6:fc:0a:dc:2e:2d:6c:1a:c2:5e:be:e7:9b:
ec:4a:2e:57:28:84:dd:db:00:c0:2b:41:ea:f1:43:
2d:e0:2d:90:7d:eb:a7:39:68:d5:dc:a2:3c:71:af:
d1:a4:de:03:63:e5:02:82:41:96:da:37:2f:91:2d:
53:07:2d:c4:b0:0a:07:85:76:53:7a:d0:5d:28:66:
3c:39:ed:ba:ff:81:ba:e6:4d:98:b8:80:e5:27:e9:
c4:ba:01:e6:f6:3f:ab:47:d8:d4:4b:74:f7:32:9b:
f6:55:b9:07:ed:3c:b7:96:ab:a7:1c:c6:22:48:6c:
7c:22:df:fa:b7:78:31:b9:a9:14:05:29:a2:2c:2a:
2b:80:9f:6a:dc:4c:04:1b:40:a7:68:43:d6:b4:96:
72:32:a9:58:b3:2b:4c:71:a4:fd:b1:6a:22:ba:6b:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:3A:43:8B:B7:15:4B:41:BB:34:2D:E7:AF:76:C7:24:FB:23:B1
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:47:f7:06:ee:bd:9f:d3:a1:f9:8b:ac:ac:0d:75:8b:5a:
7b:da:96:74:4c:a0:03:2e:cc:40:07:e5:68:92:c0:df:e5:83:
7e:ab:24:34:fe:f4:f4:60:45:74:01:06:9a:41:9b:ca:19:50:
26:2f:65:ac:9a:45:c1:2a:f1:40:a4:21:24:6f:2e:d3:22:ff:
7c:20:6c:67:5d:e7:2f:3e:a3:72:90:71:2c:40:1e:07:d4:47:
f2:fd:71:70:b6:ad:25:ec:54:09:cf:da:7f:57:74:e7:90:84:
1f:05:66:86:76:3d:8c:4e:cd:6d:2e:f2:52:97:67:4f:61:c9:
1f:62:ef:66:a0:3c:c2:b9:c6:33:a2:7f:5f:4f:55:cf:02:80:
1e:da:d8:58:79:52:06:10:77:85:c7:1d:86:b4:ff:59:05:47:
47:42:c0:33:a4:be:59:2c:b2:66:34:d4:49:97:ae:0a:12:17:
a8:38:5e:f7:d8:e6:ce:16:5e:dd:a4:53:95:1b:4f:ec:ad:93:
aa:93:e4:e9:8c:40:a3:a0:55:19:35:07:27:22:a6:08:7a:96:
2e:ca:24:5d:98:20:84:d3:79:83:4a:56:f0:25:11:24:55:77:
6f:d6:2e:d9:92:f4:67:f7:a2:d8:e6:71:87:93:e3:2a:c0:fb:
c8:cf:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:30 2025 by rpki-client