Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: TXc8GPLtxVlYz6jFmhK2yicMa7r4aFRh2JJCR4Q7Oz0=
Subject key identifier: 69:FD:E9:85:E0:EE:C6:E9:92:21:4B:F6:EB:05:14:BB:1C:41:6E:84
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 0194BD853531124445CC00823DA067B4F42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 0248
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: sJDp/LvWd69al9czcuhcKd2KUUWbIHNDlfx8JEvHDVk=)
2: ynJSD2xc-CykfYa79BP9jQj40kM.roa (hash: fMb/laTqYN39Vwte4hGLXjRHIufJPIqxfdcZimxGcGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:31:12:44:45:cc:00:82:3d:a0:67:b4:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=69fde985e0eec6e992214bf6eb0514bb1c416e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:0c:5a:19:0d:55:14:e0:c9:07:be:9d:f6:
ad:95:ed:77:68:fc:2a:b4:77:b0:fd:7a:1b:33:78:
8a:ab:42:ca:a6:6a:ff:5a:55:82:e4:8f:bb:5c:13:
83:42:ba:92:9b:b5:24:ae:65:d2:b7:f2:6c:9c:d5:
fb:54:df:c1:f8:31:67:01:54:50:5d:d0:4b:90:f5:
e4:21:5d:f1:e8:7d:67:56:44:c5:d5:b0:41:4b:db:
9d:4b:23:ab:84:0d:0d:fb:d1:fe:e9:9d:5b:3a:de:
e5:a1:f6:85:7c:75:e5:cc:2a:a9:9e:31:15:54:2f:
25:98:50:49:e0:16:f3:d2:48:2a:e6:91:85:6a:47:
ef:7c:1a:5a:b8:13:f0:cb:8f:3a:44:df:84:fb:ab:
93:97:12:eb:ef:0b:dd:b0:31:ae:17:e2:0e:b6:80:
97:41:8a:77:5e:87:43:a6:06:19:3c:50:f5:b5:4e:
d5:15:23:e8:2e:cf:b0:b9:97:f4:b3:7d:f5:6a:ed:
c9:0c:e7:53:2a:2f:46:bc:41:01:11:a3:5f:86:e4:
3b:2a:a5:0d:5a:b5:07:87:79:41:f3:2b:b3:97:44:
6c:50:ea:c1:7f:63:aa:8d:e3:c9:cd:b7:8a:31:f2:
93:f7:6b:7e:3a:2f:0e:f1:98:c4:4b:58:36:62:45:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FD:E9:85:E0:EE:C6:E9:92:21:4B:F6:EB:05:14:BB:1C:41:6E:84
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:17:d1:00:b6:5f:b9:48:d8:ae:c3:1d:00:f2:92:6e:10:9e:
e3:16:ee:fe:81:ff:ab:7d:61:d0:cc:11:86:4d:22:2d:b9:f5:
56:86:11:39:9a:b2:12:76:76:24:39:0e:69:aa:d1:b2:9d:d3:
d6:0d:17:24:7d:82:58:95:c6:b0:25:44:22:54:65:30:fb:ea:
3a:b0:8f:47:4d:67:fa:17:1b:47:5b:1e:25:8f:74:88:b3:bc:
9a:4b:4f:55:08:5f:86:54:f1:25:ce:7e:32:5c:c4:43:67:6a:
97:0e:b9:40:84:c2:8d:fc:ba:cf:c2:0c:8a:9e:da:9e:e1:b6:
20:9e:63:20:ae:cf:80:91:ba:1e:d3:db:dd:e3:28:73:5b:79:
1e:28:37:2b:94:5b:b1:5c:5c:84:3a:1b:19:95:90:43:af:fb:
e7:eb:6f:3d:ed:5d:66:d4:91:64:20:18:3d:29:1f:13:36:0d:
3c:39:4f:2a:e0:09:9f:2f:b8:d8:ce:51:aa:b6:2e:c5:8e:ce:
35:f0:d8:e8:22:06:6e:61:c6:d7:62:27:4b:a3:4f:53:e8:f9:
25:a6:b5:3b:55:b4:ce:51:c1:4a:ab:b7:d8:3b:14:5e:3a:10:
d7:d6:5e:e9:4c:53:33:ec:fc:e9:26:26:0d:7c:bb:bf:97:59:
07:f0:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:37 2025 by rpki-client