Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File: m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier: cvNvtw+dsrswUtARuyW1mODcO5dCalVGg603SYx9zu4=
Subject key identifier: BD:5A:37:10:54:6E:BD:63:9F:BF:2E:E8:B7:3D:DA:C8:09:24:AB:F7
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 0194BD4EBE9323D3286F8345057307CCA6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: CCz7FQIn8kI9ogMIaXc_bOjDx-I.roa (hash: Z7Nm6IrHUE/TC8xU7rVqcrz5JoA82LWmN+W14PD9mb8=)
2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: tb5w99rq23N+rniIF4aKhHub/bU+aDMzGwjDyhUvYiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:93:23:d3:28:6f:83:45:05:73:07:cc:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=bd5a3710546ebd639fbf2ee8b73ddac80924abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:a4:d8:c8:c1:cb:64:17:18:9e:39:a1:41:
40:62:90:d6:07:53:3f:c5:cb:5c:dd:b1:ce:7a:91:
f8:02:dd:ac:8c:9a:67:b3:05:7e:8e:a9:11:87:10:
3a:08:b5:7e:0d:3e:b3:41:e4:80:c3:67:2d:41:dc:
b4:60:6e:e6:f0:f9:ac:c4:e4:41:33:87:a9:94:61:
d5:4f:e7:44:a4:23:2f:17:ff:19:9c:54:58:1c:17:
a0:5d:22:1b:3f:79:ce:05:d4:b6:cf:48:dc:0a:f6:
f5:81:ed:33:6e:0e:51:78:87:3b:9f:23:79:5f:53:
19:b3:5f:ab:0d:7e:30:f3:86:5d:8c:d9:33:07:a2:
91:25:1b:9b:63:da:46:d5:fc:71:e7:7c:42:1f:20:
98:5e:2a:3d:ca:b9:f3:c8:35:f0:c5:be:9f:a3:cd:
d6:07:1e:08:24:20:a4:47:d5:59:4d:1c:99:63:cd:
6d:8f:7a:d3:9f:34:db:50:65:8f:09:ad:2b:da:b9:
53:ed:e4:33:28:7e:1a:e6:7b:8b:03:64:fb:aa:d7:
e4:52:3f:bb:a2:d9:df:11:e9:fc:a2:e0:40:e2:a7:
54:27:6c:dc:5c:17:80:e5:9a:53:d5:7f:21:35:29:
97:09:1e:51:99:d9:c0:1e:05:50:ba:2b:c4:63:55:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:37:10:54:6E:BD:63:9F:BF:2E:E8:B7:3D:DA:C8:09:24:AB:F7
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d0:7a:1e:f1:c6:eb:30:e6:68:21:5c:d8:63:66:3d:36:b1:
67:cf:28:33:64:a6:01:a5:37:8d:39:67:d6:73:72:d2:4a:77:
be:e0:24:9c:c1:b2:cd:fe:c7:17:db:9f:00:43:1c:20:6f:be:
ab:33:a5:3f:3f:a9:21:1e:4a:e6:42:2f:9f:5a:a4:d5:91:4a:
00:b5:39:29:4b:cf:03:92:b5:2b:5a:1a:4d:60:47:b1:1f:77:
67:db:32:f6:86:d4:fc:e4:b7:80:f7:e3:c0:d4:92:16:88:49:
29:8a:5d:c4:9a:bb:f6:32:ea:1d:a8:35:e6:b9:b1:d0:c7:75:
81:f5:f8:c8:07:97:98:53:69:6d:23:49:13:f0:03:f4:84:99:
c4:7b:de:54:c9:16:d2:b6:31:56:15:09:3d:3c:cf:20:6a:85:
90:cb:05:8e:1e:c9:5a:8b:2b:89:3d:82:bb:3b:67:14:42:3d:
4a:94:94:9f:c6:39:b8:70:e5:b2:fa:84:21:6a:0d:20:df:3d:
4c:ba:64:71:ab:31:b3:10:20:28:8f:a5:b0:d0:ef:61:fd:fa:
19:a4:94:6c:ad:1a:34:ce:37:f5:70:48:02:e7:9f:89:86:35:
a4:48:81:82:29:71:5c:f3:1e:57:09:db:3e:1d:4c:2b:0c:50:
20:28:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:55 2025 by rpki-client