Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
File: RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft (raw, json)
Hash identifier: 5+LR11ZKwCsxdME5/a9CCm9u3yXm12XhA4dFbThMRjc=
Subject key identifier: A7:67:0C:96:97:FC:32:E1:BD:9E:0A:B2:45:ED:06:E5:4C:23:F2:D3
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 0194BD17E4AD553D369DF2F95449B4C77A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
Manifest number: 0F96
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: Gnl9wgih5bkZTu9f-EBtmWB57aI.roa (hash: zbDguLxZjG7MAjNEZMNb7jOZjg/zzl6iQmvjqk6cIOM=)
2: RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl (hash: NUN1fhqY7zR5bvXhB3vCPkJpmImMtKJ1b/t9QTkxyeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:ad:55:3d:36:9d:f2:f9:54:49:b4:c7:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=a7670c9697fc32e1bd9e0ab245ed06e54c23f2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:4d:fc:78:00:0c:b9:ec:76:80:ef:0f:77:
b2:03:30:78:91:35:63:08:b8:ca:00:c3:b3:5c:e3:
1a:f8:2d:43:c7:9e:f5:76:a4:c4:f9:59:4b:04:61:
9c:fb:56:a8:60:58:8a:c8:1c:ab:c6:ef:0c:13:c8:
0a:52:d9:6d:f4:a1:a6:31:8e:4a:e2:10:7a:0f:aa:
be:14:f3:40:60:b5:94:e4:f1:e7:b4:1c:df:ed:04:
ae:eb:de:b1:f5:3a:24:f9:e6:08:a6:b8:7a:72:13:
48:c9:79:31:73:94:bc:a3:a3:3a:b3:a6:a9:46:80:
e6:15:55:8c:ed:8b:56:0c:e2:20:25:3b:9f:73:2a:
be:73:a8:24:ea:1c:99:9e:02:17:e3:d2:41:56:94:
bf:3a:ef:4b:66:38:29:5d:7e:82:3f:c8:42:e7:ab:
76:4b:d7:a8:b4:3c:13:7d:aa:83:b9:30:e2:b5:3b:
4a:e7:a1:cf:8b:ab:44:50:ce:85:38:bd:a7:0b:f1:
f9:20:5b:bd:5c:c3:7b:d7:75:c9:b4:14:70:2e:d2:
18:44:fb:b2:fb:65:52:74:9c:26:6f:15:d0:e5:6e:
35:61:c2:b2:a8:9c:a6:cd:bc:0a:57:9c:3f:15:25:
37:4c:d6:b7:a0:71:3f:d7:ee:69:14:23:e0:a1:a8:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:0C:96:97:FC:32:E1:BD:9E:0A:B2:45:ED:06:E5:4C:23:F2:D3
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:54:c3:97:1b:04:7c:0c:64:60:7c:04:f9:e6:22:9d:0b:
0f:67:63:17:e1:f7:48:81:eb:96:c9:1d:5f:d9:40:26:77:0a:
d5:17:4c:d7:8e:69:18:fa:af:b8:5a:b0:fa:c5:82:4d:1f:9c:
ed:e1:37:57:7e:e0:5e:c7:80:41:8d:4b:60:73:ea:b1:b4:05:
07:f7:2a:5f:4f:86:35:d4:9d:99:70:35:cb:bd:9f:59:70:15:
4c:61:94:72:6f:4c:cc:e9:c0:99:84:d1:bc:68:d9:6e:e5:4a:
fc:76:24:77:13:58:47:6a:d9:8c:54:ba:90:17:49:05:9a:2c:
7f:6e:1e:c8:a2:80:3d:88:47:9e:43:a9:7c:4c:11:b6:95:83:
29:b4:84:af:4b:c9:4b:22:04:92:54:ae:69:86:1a:39:ee:aa:
75:fe:f2:a3:53:52:f4:d2:66:02:87:41:f3:fe:94:52:95:21:
c1:8c:35:23:7a:a3:6b:37:a1:91:b9:64:0a:4d:8e:d7:0a:c9:
ec:8d:f4:6d:42:1e:fd:b2:4b:3c:1f:a7:d1:e4:c7:d7:65:5b:
c5:24:25:d7:97:e3:47:10:a0:aa:c4:a6:df:77:b5:06:9d:0d:
32:5e:0c:ec:9e:79:eb:c7:c6:b9:2b:42:57:48:b8:5a:15:c6:
db:7f:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:05 2025 by rpki-client