Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
File: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft (raw, json)
Hash identifier: 6Jr/kFTD4FhsxldjP8PZxChv/LoAGBaPfeAEp1wMnZk=
Subject key identifier: 38:08:06:9A:3D:0B:BC:77:FA:FA:21:0B:FB:DA:AD:CA:BE:FD:55:B3
Authority key identifier: E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
Certificate issuer: /CN=e8f239a70043734172d26378bf2106ae72552187
Certificate serial: 0194BD4E7333D1A121E344CE7FC72606AEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl (hash: t/X5GUTZZpw5x/H1c7ke2xuY75bLjn1841OiFg57G/g=)
2: PKL-xLXtjYXiahzFZqoEsRCNiOA.roa (hash: Rpkn9hNDDIXXf1JwQ1dkAvJ5Khg2QBT1R7VsHD9aJkU=)
3: RBD3jsn9I98UUTgkjqxS1NXuBZo.roa (hash: FmEfEXEO9/34iaUvQCdTzbyom3ZG9wQcLbWcPjAbrgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:33:d1:a1:21:e3:44:ce:7f:c7:26:06:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f239a70043734172d26378bf2106ae72552187
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=3808069a3d0bbc77fafa210bfbdaadcabefd55b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:ed:4e:6a:e6:fa:f7:65:94:b1:c0:5f:b9:
ea:33:e3:d3:45:e8:4c:70:cb:16:e3:cf:0f:21:96:
13:d3:e3:87:0b:2d:f9:73:c9:4c:0c:91:eb:d6:63:
ce:2e:ec:cb:3b:d8:cf:eb:88:3c:01:f4:0e:1b:ef:
84:b6:42:04:59:77:53:97:26:88:f5:6a:59:79:41:
e5:2c:df:82:7d:0a:f5:61:31:e0:b4:3c:c6:b3:5d:
dd:8f:f2:f9:0c:df:74:f8:01:08:ed:25:6f:91:ce:
32:b3:43:b9:18:c4:f7:31:2e:02:57:95:62:5f:72:
6a:d0:b1:5f:df:4e:27:e6:f9:5e:33:c2:21:6d:12:
25:c5:65:14:ed:c9:8b:19:b5:47:35:7b:d5:41:5a:
89:e6:c3:b4:64:5c:c8:71:e6:22:6f:1c:3b:04:c4:
0a:62:22:1d:f1:a7:03:01:75:45:de:1a:a8:48:17:
fb:65:28:69:07:60:3e:d8:5b:4f:fd:04:c2:dc:a9:
0f:b3:28:b7:1d:b7:dc:bd:37:30:c9:da:05:ab:58:
ec:f8:6f:ef:77:b0:d3:50:93:55:bb:86:55:a4:9f:
74:28:89:2f:24:46:ba:e4:79:50:19:93:98:4f:b7:
06:72:0f:57:0c:d0:73:0a:b4:cc:72:df:6a:18:72:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:06:9A:3D:0B:BC:77:FA:FA:21:0B:FB:DA:AD:CA:BE:FD:55:B3
X509v3 Authority Key Identifier:
keyid:E8:F2:39:A7:00:43:73:41:72:D2:63:78:BF:21:06:AE:72:55:21:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/4e902a-299f-4da7-9a6d-669bd113a178/1/6PI5pwBDc0Fy0mN4vyEGrnJVIYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:83:46:1e:76:d7:ef:9d:9e:45:da:d3:c6:5f:26:fd:1e:75:
bc:f3:83:33:33:00:ec:d9:26:bf:49:92:95:fb:53:32:ae:74:
0f:a7:01:12:36:78:f7:d0:e0:bd:2d:39:d4:68:52:ee:be:27:
11:4b:ce:b6:ea:15:4d:5b:4c:98:18:dc:73:6c:4a:81:bf:11:
b1:5a:16:4e:f8:0d:d1:e4:26:3b:ea:f3:9e:90:5c:42:c8:23:
29:75:66:3f:3e:04:15:c2:36:7e:da:7b:54:e4:ba:e0:d5:06:
6f:b8:41:42:1f:1c:de:a6:85:69:06:ac:59:44:1d:38:61:55:
61:5b:b9:53:3b:b5:1a:53:28:d7:4a:b6:64:67:39:b6:6e:43:
9a:f4:42:bc:69:fe:bc:af:00:e9:d6:5e:75:9b:37:23:ba:b3:
e0:13:30:36:d0:db:d9:72:ae:ff:82:47:80:eb:d6:9c:f4:39:
2a:56:da:c6:c5:53:b8:d7:d5:78:3f:c5:63:64:f0:4c:c3:9c:
c4:1c:67:94:ca:09:e1:18:05:e5:ad:ae:ad:b3:04:a6:03:23:
c7:90:33:bd:7b:c6:54:e5:53:1f:4e:e0:16:75:ea:3e:d1:6b:
bf:0a:fd:06:ba:68:eb:3a:35:7f:8b:40:6f:56:c9:3f:49:ad:
b0:d4:3a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:07 2025 by rpki-client