Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: mvrzmIEG9WT8j0O7L1NATfJybPSeIIlBevyGzSZZzH8=
Subject key identifier: EC:DD:B7:97:2A:AB:8F:EF:35:5E:B8:E2:79:CF:A6:D7:BD:A4:E3:9C
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 0194BD4EAD028A8AD8A4E377D6BAD29E2B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0972
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: HjLHK9XT1p29rReK9IlWQoH4s5XMoq0zBnFQIZJ0l24=)
2: It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa (hash: 7H+X0erT0owXhcTltBjLEsiIIl6BxhT41pVVMePz04w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:02:8a:8a:d8:a4:e3:77:d6:ba:d2:9e:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=ecddb7972aab8fef355eb8e279cfa6d7bda4e39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:10:32:13:a6:8a:f5:d3:ed:1e:6f:12:a3:
c2:09:bd:d7:c9:fc:43:f3:6d:7e:20:98:71:9a:0a:
89:e2:58:9b:e7:ea:d6:67:da:a7:e6:18:53:de:54:
57:0a:26:55:ba:a5:55:43:4f:ac:fd:e0:8d:b7:ac:
57:a1:c2:69:48:34:2f:1d:f9:c9:ba:62:85:44:2f:
eb:ee:e8:aa:b7:80:33:31:2b:78:b5:04:25:41:aa:
0f:75:2e:9e:84:3a:1f:99:66:21:43:f3:fd:76:09:
17:c5:a5:3d:b9:3f:8c:09:84:a1:4a:14:58:fc:b3:
b5:4f:1c:bb:7d:86:e9:17:6e:67:5c:ec:df:23:56:
00:13:9b:11:14:af:de:81:1c:d7:23:a3:f4:5c:74:
4a:52:ed:39:7a:ae:15:1e:c5:e6:ad:c0:ec:5b:11:
dd:dd:fc:32:4a:1e:28:b5:e3:84:99:8d:45:3b:88:
35:33:1a:8d:c1:cf:d1:85:12:0f:61:13:45:cd:26:
c7:5e:a4:a6:ef:3d:73:15:1c:3f:c9:58:ae:b8:a3:
13:53:02:d1:df:c6:a8:7d:76:39:63:4e:58:c2:89:
2a:61:72:48:43:61:ef:af:8a:f4:e9:6b:d7:df:ec:
aa:9a:9b:ef:05:97:bf:da:5f:e4:46:b6:49:26:24:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:B7:97:2A:AB:8F:EF:35:5E:B8:E2:79:CF:A6:D7:BD:A4:E3:9C
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:37:ff:f9:ee:b1:c9:d4:79:62:63:52:70:38:d2:7a:8e:bf:
60:f0:13:e3:78:6a:6f:ce:70:51:1b:23:69:a5:87:4b:33:95:
5a:4b:43:f3:db:f3:c9:e8:83:ed:08:5a:52:3c:4b:eb:c2:df:
63:3d:89:6c:8c:0e:46:01:49:b3:e5:83:3c:f9:4d:f5:09:9b:
d3:f8:0d:b8:0d:13:f4:74:e2:4e:ae:70:0a:c5:ff:6b:81:31:
5d:d6:ee:ee:37:fb:d7:03:05:dd:b3:80:f9:c5:fe:63:02:0a:
6e:e5:e5:eb:f5:5a:0f:9c:c9:53:75:da:e5:d5:34:bc:f9:b8:
21:e3:e2:c1:a6:a9:bb:8d:a9:05:fc:56:c4:2e:4a:84:89:80:
27:cc:cf:18:d1:38:1b:ef:7e:60:f9:59:c8:ca:d9:d7:c1:c2:
59:3b:ee:9f:fc:11:53:d3:7b:68:5a:6f:1b:d5:0c:ec:4b:12:
0e:bd:da:a9:a1:91:3c:50:1c:49:c0:52:1d:69:26:39:c7:d7:
3a:a7:7c:44:1f:74:8c:45:02:55:1a:8b:ab:bc:d7:9d:d6:90:
b8:85:2f:6a:c3:e0:59:36:4b:3f:92:8f:18:db:36:ef:22:4d:
6c:cb:9b:09:e5:ea:df:4c:55:fd:0d:bd:1d:17:ca:57:0d:79:
aa:58:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:38 2025 by rpki-client