Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: dPuwXYXIFuAeg9FVQjf/BKCRR9hD8Lzmthm0R6ok5Ao=
Subject key identifier: FF:0B:DA:DD:78:67:6A:F3:32:E6:06:EE:F8:98:BE:22:D9:13:82:C8
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 0194BC72B97E18531965A33C60DCB1D8C6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: Jt3UjzO3R+YX2UIdbC2MqLl5MpdzqSIoPCnCXDgJNY8=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b9:7e:18:53:19:65:a3:3c:60:dc:b1:d8:c6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=ff0bdadd78676af332e606eef898be22d91382c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:ce:bb:fd:da:a3:bf:01:78:cb:f0:54:9f:
32:6a:9d:9c:d3:bf:a4:51:ac:ad:c0:dd:55:bd:4d:
9d:14:ce:3a:7d:87:b2:fa:cf:17:55:9d:3d:93:f9:
10:48:87:2b:0d:81:de:d9:2a:f5:01:d3:58:2a:2d:
c3:33:e1:70:86:e3:6c:ca:f0:16:e0:31:f4:63:6b:
9a:ff:bb:bf:a2:39:bf:a5:c9:53:50:29:ca:24:db:
9e:04:32:b7:d3:d7:be:01:37:27:cd:bd:09:e8:5a:
d3:38:a7:d4:76:8a:0f:e8:f7:28:42:b4:5e:f7:18:
2e:9e:ce:f0:7e:d1:71:e2:35:1d:c6:b4:de:0c:c7:
1b:31:42:4b:f5:5f:f5:3d:3f:f3:ca:87:50:bd:47:
cc:c0:8f:13:0a:8a:0a:5b:92:a3:5e:ab:3d:46:33:
eb:13:07:06:e2:92:8f:47:a1:7e:62:45:56:b7:3d:
f8:4a:be:9a:fb:8c:3f:10:32:09:71:6e:6b:60:33:
22:f3:a3:e8:07:62:ac:23:fb:c1:63:4c:26:bf:9e:
70:12:87:da:fb:e2:7b:a7:ff:65:e2:91:c2:f3:1a:
96:2f:d9:cd:43:48:13:df:69:76:09:39:3f:38:4f:
2c:14:bd:63:f6:ba:a6:c5:98:b4:4e:a2:a4:05:c9:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:DA:DD:78:67:6A:F3:32:E6:06:EE:F8:98:BE:22:D9:13:82:C8
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:0a:7d:bb:65:9f:90:eb:15:25:4f:40:42:c3:1e:dc:2a:
0a:3d:71:e3:cb:86:ab:b6:de:96:cb:01:9a:17:47:06:75:d2:
8d:ee:41:59:28:24:0c:19:36:8a:d5:f8:c5:7d:a4:c7:f4:e8:
d1:cc:97:d5:59:54:22:44:9a:61:c7:08:ca:bf:ef:83:ed:c8:
57:a2:95:d7:1c:a9:39:0f:78:46:53:d3:0e:0b:88:f6:28:21:
a4:98:20:06:1f:cc:3c:89:37:42:d1:56:da:fa:c6:1a:c8:03:
43:7a:86:80:7a:cf:82:41:74:ce:38:0a:31:d3:a5:8c:ec:84:
f2:d5:48:f2:43:01:cb:9f:d1:07:69:f2:90:cf:3a:49:f1:e5:
ae:f4:51:2c:f5:a8:37:40:81:75:bb:28:61:a2:87:0e:5e:e7:
7b:22:f1:be:8c:76:ac:b2:da:5b:01:41:f7:fe:2c:d2:37:cb:
ec:0a:61:5e:a9:e1:3e:ba:f1:a5:b4:e3:74:e5:33:8d:d2:f9:
6b:c1:4b:82:3f:aa:03:5a:10:f9:9f:3c:46:6d:44:89:56:d8:
2c:52:62:cf:af:41:6f:44:09:e8:aa:29:06:9a:b9:02:b5:b4:
de:92:81:ea:7b:03:dd:fa:7d:67:fa:1b:a8:b7:44:1a:62:61:
7f:f7:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:35 2025 by rpki-client