Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: 9AuZ7gHiMd3XJVJV+KYbaU25MSjD5TbC2xp1njDGMrc=
Subject key identifier: 33:EF:A7:60:CD:F1:61:28:EA:92:17:5E:C4:84:1E:F0:3C:F1:0C:5F
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 0194BBCE7BD23BF2E93B5D244803CB47B842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 0D95
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: O3aeKM3Qf/6f3Yv1Ngt6x/jq6e18nYybDr+rCxeG8j8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:d2:3b:f2:e9:3b:5d:24:48:03:cb:47:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=33efa760cdf16128ea92175ec4841ef03cf10c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:19:2d:30:ee:04:03:f3:a1:b1:21:c5:ae:
da:23:a1:42:e3:78:2b:a9:29:b4:f2:dc:a3:50:78:
5f:ff:a2:39:4b:17:e9:d8:a5:53:7a:1c:8b:6d:0b:
34:21:10:5f:2a:9a:22:e6:33:a7:75:fb:25:33:3d:
2a:e0:98:4f:e0:e2:b1:0f:8a:73:a8:90:79:b8:dd:
de:4a:80:68:4b:6a:58:88:b9:24:bd:93:69:d5:82:
30:bb:af:49:94:0b:1d:e4:e7:fc:73:7c:65:21:70:
67:e5:db:2d:ba:c3:65:88:f1:51:6c:b6:07:13:85:
42:ad:a5:bd:b4:ea:74:f4:d1:1b:cd:f6:37:f2:63:
6a:d1:d4:9b:a8:a7:fd:fa:cc:e7:92:8f:e2:f1:b5:
9a:23:99:c9:30:f4:9f:8e:49:36:10:55:32:d4:18:
b1:3a:56:c1:7f:58:8d:6c:ef:4d:c4:31:b4:27:ab:
bd:4b:37:14:87:e5:6c:43:c5:dd:c9:d1:da:bf:f3:
aa:88:f3:2e:1f:12:86:e9:b1:06:4e:32:d9:54:80:
08:06:fc:e9:78:f5:cb:2d:2e:43:48:21:1f:8d:dd:
5b:55:22:5c:c7:6e:da:73:64:c5:61:8a:f6:1d:0b:
11:66:69:cf:29:1c:f0:a7:dc:29:11:6f:bf:ec:0f:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:A7:60:CD:F1:61:28:EA:92:17:5E:C4:84:1E:F0:3C:F1:0C:5F
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4a:8d:6a:12:12:25:a6:f5:23:d6:47:41:e4:17:97:bc:8b:
21:7c:98:3e:86:bf:6f:fc:52:88:15:79:40:04:83:e3:f2:83:
e1:ef:80:0c:73:11:f3:c0:ce:5e:aa:14:77:5d:be:55:60:ae:
54:6b:40:5f:82:b6:5c:52:1d:a5:c5:35:00:a1:af:2f:02:39:
56:69:12:11:66:ed:1a:ac:bb:23:72:22:2b:7d:32:a8:bc:0a:
c0:cd:80:f6:4e:0c:93:ca:09:9a:d9:79:de:ba:a5:e9:49:0a:
a6:25:7d:f8:c8:ba:3c:89:40:39:a6:cd:5e:27:4c:1b:bc:46:
d5:06:70:db:33:67:f0:00:e9:48:06:5a:4d:ba:ae:99:38:4d:
98:19:6b:3f:08:56:65:9f:6b:ea:2f:53:17:35:a5:86:5b:5f:
8b:84:b6:0f:30:f9:00:5c:2f:75:4f:3d:2c:d2:e1:8c:18:fc:
d0:7a:e8:92:a8:64:54:53:91:8f:a7:43:c4:33:76:21:a0:56:
a0:3f:28:0f:6f:13:60:7a:94:c9:37:a8:24:e2:8f:aa:e7:00:
8c:98:f7:47:b8:8f:a2:33:6d:0d:ee:c8:a0:8f:60:8a:d9:ac:
a6:d5:f0:b7:94:06:b1:d3:3d:2e:eb:e2:f6:27:fe:06:f7:ac:
14:4d:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:58 2025 by rpki-client