Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File: 1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier: Omv2H0UbZvPdrbKtgl+rmlXHPeOrxkkrRrlvIcp49Xs=
Subject key identifier: 57:FC:42:C5:8B:C5:C5:37:9D:5D:70:08:1B:E6:63:9A:DA:34:25:1C
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 0195DFD89D820E34148A4A6924C972580774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number: 14D1
Signing time: Sat 29 Mar 2025 03:01:09 +0000
Manifest this update: Sat 29 Mar 2025 03:01:09 +0000
Manifest next update: Sun 30 Mar 2025 03:01:09 +0000
Files and hashes: 1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: lvVN7KYQu1rHDbS3pwoAO6R8xKb+EefCLAT4peSTnsI=)
2: PqhLYK9y6l-hcls-AteZg7ZowWc.roa (hash: 5kkmCBC611tewDVZOjvNR50HAAbuHCz11F3GzXw+Bh4=)
3: QecKb_80mIAAxxtjr9nCEvB6HF0.roa (hash: jhMDZBJq90fFjxjE7Y5j5TgVPh9pkkoV7GaQo4Rk7a8=)
4: U8dIjWtcY2-M_CEVsA6b8bwpFDE.roa (hash: Fkz8GUWY9XL31RlpgAhEjSOpkZkA5/bNbRzb9y7VS9c=)
5: h5VC8VfOvh2FVI-sq1W-WF03wy0.roa (hash: 42Hph67k/LPhwRY52Y37tgXPme/FkjBrpaSNaay87u4=)
6: oQKx1duX2-5LImQ1xvyMHjuvy3g.roa (hash: dxqWqZp99XjGApMFv3ixy2jrNScfzpyezdH0iGmR45I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:9d:82:0e:34:14:8a:4a:69:24:c9:72:58:07:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Mar 29 03:01:09 2025 GMT
Not After : Mar 30 03:01:09 2025 GMT
Subject: CN=57fc42c58bc5c5379d5d70081be6639ada34251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:c9:cc:0e:d5:cf:da:9d:20:f3:a0:e2:5d:
9f:39:e7:45:b1:99:f5:53:38:b9:7e:6f:ba:de:5f:
7a:ef:2e:25:dd:a5:bd:51:26:e5:42:0d:bf:b1:9d:
19:9c:45:4a:8c:b2:3c:4c:c9:ad:a5:4a:2c:3a:fc:
17:eb:b2:15:24:37:74:2c:24:5a:cb:00:0f:59:e3:
b0:e6:a0:7d:39:65:e2:25:bb:6e:ff:0b:6d:78:f8:
05:38:80:2a:30:22:81:2b:e2:70:e4:a2:92:c9:19:
f8:0e:00:2a:59:99:a4:0c:f8:1c:c4:59:e2:3f:c3:
72:e7:2e:5d:b6:bd:e2:5b:9e:de:fd:09:da:63:ad:
85:e2:03:c2:2d:d4:67:c7:d4:9d:87:4c:74:93:54:
53:01:4d:cb:11:d7:47:a9:7e:bc:4b:8f:ef:16:0d:
6b:f9:b7:a7:ac:69:4d:12:6e:fe:01:95:d5:e1:4d:
dd:1d:3d:12:5b:9c:42:04:72:18:5c:19:6f:09:21:
98:b4:0a:89:a1:71:0a:67:9d:cc:36:4c:0f:91:34:
6d:6f:2c:f1:5e:35:8f:d4:ad:5b:8a:6e:39:0e:86:
0e:ac:1b:b5:a1:72:93:31:a8:1b:82:57:42:f6:15:
50:15:33:08:5b:3f:d4:1c:7a:82:59:8f:e1:32:7f:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:42:C5:8B:C5:C5:37:9D:5D:70:08:1B:E6:63:9A:DA:34:25:1C
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:57:d5:0e:8a:5b:16:1e:5a:1c:24:7c:28:4b:0d:0d:4a:b0:
a8:49:b5:e1:3a:9f:9e:61:79:c0:14:03:dd:47:ec:6a:94:07:
8e:c5:4f:e3:05:36:a0:f0:01:35:ba:a0:f9:93:f5:d3:1f:f8:
bc:2a:28:33:c1:26:82:73:39:e0:a3:ba:a0:3e:12:35:9e:0a:
99:76:36:6b:f8:f2:e5:ae:58:5b:fc:8d:43:dc:5a:43:e7:11:
a4:11:dc:f7:05:61:69:00:f7:59:cf:35:c2:5f:90:ab:0f:bb:
5c:8e:8b:62:6d:63:1c:1a:9a:be:e9:b5:b7:60:f4:69:20:82:
71:f9:e0:1b:8d:e6:1f:0d:92:d9:a6:8d:d8:89:29:08:a8:13:
46:ae:69:d7:79:d3:72:16:f1:66:d4:0e:f3:bb:38:fc:39:6e:
af:7a:ae:c5:b3:17:b6:c4:97:95:3b:28:cb:b5:a7:1a:6f:cb:
71:ef:86:89:e4:5f:d2:6f:5d:06:f6:73:e1:8a:86:6f:46:53:
84:ee:2e:c1:dd:de:64:dd:f8:3c:24:80:43:ec:fa:37:72:95:
a4:61:a4:8c:30:e3:fc:61:43:62:0e:38:c4:e0:0b:31:2d:ea:
85:31:16:ab:d4:b9:86:6d:a8:51:f0:28:75:9d:bd:a4:ca:9d:
7d:98:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:39 2025 by rpki-client