Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File: 1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier: QV3Hjld/9WAKlSschzqKP8INDl5PVcYhgwZR3plhTmc=
Subject key identifier: CD:9D:BD:E9:8A:DB:78:20:1A:E5:DC:83:71:8B:A5:73:79:2A:05:01
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer: /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial: 0195E1906497B55D3686EEED60EBBBE3F60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 11:01:31 +0000
Manifest this update: Sat 29 Mar 2025 11:01:31 +0000
Manifest next update: Sun 30 Mar 2025 11:01:31 +0000
Files and hashes: 1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: K0WYxfPr2PQN5K7MQXFZWTIEuoxcv8fMCdxDYp2wROE=)
2: evwk9Zfy0oSug_OT-JqAYLVFN48.roa (hash: p8vwbzaWZAlgsI4s0YE3pDc8vzWrcDuiDp7ZJjKpleM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:64:97:b5:5d:36:86:ee:ed:60:eb:bb:e3:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Validity
Not Before: Mar 29 11:01:31 2025 GMT
Not After : Mar 30 11:01:31 2025 GMT
Subject: CN=cd9dbde98adb78201ae5dc83718ba573792a0501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:8c:8c:e6:59:ae:3c:6c:d7:cf:d5:2b:76:
5b:0b:34:22:1b:db:d1:08:55:49:bc:b3:97:43:6a:
00:3e:2f:26:e6:6f:c7:b1:71:74:af:0b:af:64:f0:
d6:de:e7:dc:be:95:ba:b0:d6:f8:39:f5:15:71:e3:
b9:3e:d2:7f:f6:d4:8b:8b:84:e8:b7:2a:3f:8f:ca:
7f:a3:59:0c:37:eb:15:14:21:5b:92:b8:a4:c2:b3:
18:5d:54:89:4f:67:c6:0a:ac:39:ed:27:29:dd:1b:
e8:69:5d:ed:f2:50:48:3c:8d:85:e4:ae:ae:2f:1d:
23:59:41:93:54:29:dc:94:98:bf:ff:11:a2:04:22:
4e:7e:d4:2c:96:ae:4d:3d:82:c7:8a:04:fd:c4:99:
9c:ed:fe:0e:0a:e7:f3:d9:08:0c:72:e6:2e:b4:1b:
41:0b:17:08:37:7d:bd:a2:6f:37:bd:6c:34:54:77:
bc:24:41:87:82:40:b1:8d:6f:ab:2e:1d:a4:1b:4f:
67:bb:ef:34:ed:b6:57:92:c8:85:65:7e:56:fe:29:
c7:b8:c9:78:01:14:a6:38:83:69:01:f3:b5:26:a1:
76:9e:f2:d8:a1:42:16:15:97:ae:cc:66:3c:be:ab:
e7:07:7f:21:ab:fc:d0:b3:55:a6:56:70:7c:e5:85:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:BD:E9:8A:DB:78:20:1A:E5:DC:83:71:8B:A5:73:79:2A:05:01
X509v3 Authority Key Identifier:
keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:f2:29:93:d7:4f:83:82:ce:bb:ab:55:c0:b5:bc:43:51:
50:1c:08:13:92:70:3f:fa:89:cb:d0:3a:82:14:2a:4f:16:30:
72:17:13:12:30:1b:62:78:80:c6:92:77:de:c4:5d:ac:03:b2:
94:ab:3d:9a:8c:4e:d1:04:8e:70:e9:95:b7:54:05:22:eb:cf:
62:c6:06:cd:98:48:b7:1b:e1:6e:58:52:20:04:98:34:b2:e5:
e4:fd:05:95:9e:aa:80:5c:56:ef:c9:e6:6f:3c:ad:30:cf:95:
8a:c1:bc:54:08:85:5b:dd:22:30:ee:2a:d4:2f:1c:29:38:99:
84:c5:7c:de:f8:b7:17:e2:ee:85:ab:4a:f4:57:5a:0e:05:07:
cd:47:8f:06:45:d9:e2:e0:9c:ed:3b:76:a9:67:5e:37:5b:01:
3c:46:8a:69:f5:0f:3c:d3:41:2e:72:f7:3b:58:ef:2a:0d:0a:
d1:bb:83:b2:71:98:0e:d0:5f:26:10:81:7a:4b:de:94:25:3b:
25:6d:14:23:a7:29:35:01:73:42:7a:b3:79:9d:48:1b:11:08:
bd:3b:ba:31:d1:14:62:6a:22:55:fd:fa:ce:62:26:6c:12:dd:
d0:4c:e0:6b:c1:b6:34:48:ed:82:0c:2a:1d:43:9a:64:28:6f:
00:ba:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:19 2025 by rpki-client