Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File: 1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier: iKd+uiMwZUA/ReH3fLBbl31k81vrhD6wlH4otRLg/PE=
Subject key identifier: 05:4C:8E:2F:8F:F6:18:DF:9A:F4:61:B8:15:DC:68:EE:16:39:60:1C
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 0194BC72F1AE2FD317E39354DC38DA66C81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: GTwbQlvwAeOAxD7wVDhRCgcg1tGFo/CibHd+sVyLNfg=)
2: OhDCqCKfAFaXsXhd0gKQoDKYCvI.roa (hash: QLijyVoBjHRCj6G7QWN6t5aH2KftVDSPxZ4yQhURnSM=)
3: _lFwipGcBULs-OtxLncFCBpHs9g.roa (hash: /CL1lT0eqTnjw/VqCvPhFbClnc8+/9CwhAbZX1+HFIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:ae:2f:d3:17:e3:93:54:dc:38:da:66:c8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=054c8e2f8ff618df9af461b815dc68ee1639601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:9d:64:85:98:cd:dd:a1:c7:76:f9:e4:70:
ed:2e:40:c2:b1:13:e8:a3:d1:13:d9:e8:33:89:ea:
8c:07:1c:7e:57:60:d6:9b:e4:75:2b:9e:fd:b4:f2:
7f:ec:37:59:73:41:77:9f:22:98:95:c0:e1:72:4f:
0c:4e:b4:ae:4a:72:55:e9:f7:95:58:ee:9c:0e:58:
b3:6d:be:93:d8:a8:33:cf:0d:78:41:f1:27:e2:2b:
8d:26:77:31:32:f6:16:6e:52:cd:41:5e:d0:07:ff:
8a:b3:94:8b:91:b5:5e:02:ac:7c:d6:ac:f0:66:58:
e2:67:c9:a7:d3:10:b3:3b:85:07:a7:36:de:5b:30:
99:a0:22:8c:d4:56:d1:f3:27:d1:22:c1:2b:bf:a4:
a2:f4:c4:1b:fb:2c:12:e4:0d:3c:9c:81:3e:05:ce:
42:d8:36:67:a6:5c:bd:a2:bc:63:90:66:09:0a:97:
a0:84:4e:8d:ec:c5:a8:8a:60:56:e8:3b:77:f5:23:
15:63:e0:15:02:e9:2b:28:0a:05:e4:ae:8e:dd:48:
31:1c:a5:f0:b8:cf:e2:96:f2:f5:f0:8a:52:38:f9:
7c:ab:67:09:8b:62:e4:13:cb:15:8e:0b:ec:d5:68:
90:32:95:66:15:77:9d:c1:b5:e7:a1:31:95:c3:26:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:8E:2F:8F:F6:18:DF:9A:F4:61:B8:15:DC:68:EE:16:39:60:1C
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5e:ad:00:11:4b:71:50:cb:23:29:52:c6:bc:44:7c:24:20:
b5:cf:e5:7b:24:7c:01:45:df:ad:b4:aa:f0:d4:20:7f:8c:c7:
1d:48:96:47:b7:85:09:93:b5:33:28:15:4d:e1:5d:aa:d3:95:
30:eb:60:07:1a:15:71:33:6d:56:7f:cc:62:d7:00:7d:20:17:
4c:29:38:2d:2e:76:86:a9:e0:2e:ad:d8:6c:f9:b0:df:b1:14:
3a:8d:d8:3c:e5:93:ee:2a:0f:ca:4b:3a:14:5d:92:74:3b:46:
8d:59:98:ce:7b:91:08:78:e9:fb:0b:68:d8:72:c2:6c:10:48:
a6:1b:e9:b8:7f:99:8c:ba:c1:25:68:ba:1c:a9:41:30:75:4d:
fb:2a:3e:c2:fa:9b:a2:23:b9:00:04:fc:7f:8e:14:66:e8:d8:
29:2b:44:82:9e:db:dd:e7:31:79:6d:6d:ed:b0:eb:53:3a:eb:
0e:40:70:d2:af:cc:99:ca:53:5b:e8:82:29:d1:61:0e:2b:e1:
3c:5a:e8:27:d8:03:37:8a:31:18:47:d3:38:54:ab:03:f4:7f:
3b:ad:30:4c:e2:2a:21:eb:3e:28:c4:45:2b:57:91:cf:5a:a2:
5e:7c:0c:47:d4:05:ee:09:8a:69:5f:7c:61:c5:0a:6f:fc:e7:
d3:3c:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:46 2025 by rpki-client