Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: TgKsZPRV1Qk31Eq518hYnwzrUCUkSFikgx/8T20Wee4=
Subject key identifier: 71:4E:EC:3E:A0:79:23:B3:48:8F:EF:50:B6:18:E5:72:92:59:2E:F2
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 0194BBCDE6000D8075C4E9D8038FEF8CB266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: n1UyzZUIQqF9ym+vR86d6LeA6YUoVU0K8Bv1MvzMNqo=)
2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:00:0d:80:75:c4:e9:d8:03:8f:ef:8c:b2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=714eec3ea07923b3488fef50b618e57292592ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:03:78:8a:31:fb:c6:0b:94:0d:b0:1f:7b:
6b:1b:4d:b1:ff:65:1f:b1:51:cb:08:ae:30:68:fb:
ba:0a:1b:f8:d4:bc:b0:17:33:6f:22:ca:c1:45:a9:
29:5d:bd:cf:cd:91:c6:f0:9a:82:bf:71:77:84:cd:
9c:1a:17:7f:49:b8:e2:3e:51:7a:a4:04:77:4d:a4:
fb:4e:41:03:8f:60:89:ad:62:7d:f2:ea:0e:5b:27:
a0:6e:b8:3a:a4:37:67:16:3c:bb:c3:d0:c8:6c:74:
0a:c3:39:83:44:34:d6:85:47:e7:64:3a:95:7a:bb:
07:94:db:d5:88:3b:ab:6a:96:b5:78:52:0a:c1:cc:
e9:82:5e:4d:ff:f8:99:33:cb:c8:83:75:a1:5c:84:
24:00:e4:ff:68:ba:8e:95:db:8f:2e:91:20:4b:9e:
43:fd:22:57:a5:e4:89:83:96:68:96:4b:7c:35:b2:
4e:ae:f3:20:03:8e:6e:f6:8a:3f:d8:f6:eb:be:ff:
38:eb:60:29:3c:06:83:32:6b:dc:26:34:fc:d3:2b:
9f:45:99:9d:79:c8:e6:b3:19:23:2a:89:cb:f1:3e:
1f:2c:85:bd:3e:c9:d1:ab:0d:bb:71:22:ba:6b:f7:
ce:18:bc:22:23:f4:46:af:8a:f2:9d:42:8e:6a:fe:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:EC:3E:A0:79:23:B3:48:8F:EF:50:B6:18:E5:72:92:59:2E:F2
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6b:8c:c9:fe:6b:46:d2:e6:70:d9:e4:fd:77:24:92:77:7d:
a7:2f:83:0f:6e:7c:38:68:d7:62:e4:c7:38:b6:d2:73:b5:4f:
5d:be:77:cf:3a:96:9e:32:cf:24:79:58:5a:c2:82:7d:3b:b5:
35:34:90:14:9e:18:bd:0a:a8:6d:03:cc:79:84:13:f6:a3:2e:
67:4a:91:fd:48:c1:29:19:13:83:fb:ed:f5:98:86:0b:ec:a7:
55:d1:7d:45:b5:13:8d:12:ee:4c:70:7e:d4:fe:ac:b2:82:a3:
ca:08:05:69:0b:c1:a2:d2:c2:d9:f2:ca:12:ca:54:62:69:fb:
2b:ec:b6:18:c4:89:fe:a2:43:e8:19:65:d4:f6:89:55:1f:e0:
d3:71:e2:42:ae:3b:96:e8:63:c1:1e:ba:2c:fa:0a:16:f9:d7:
ed:ae:11:7b:75:70:e3:a6:ef:c3:dc:63:37:23:7d:ec:71:c9:
0b:b0:ca:b6:56:ba:27:cc:6a:cf:bc:70:f7:71:1c:18:56:b9:
54:6b:70:88:ba:4e:63:22:98:0c:c2:8a:4f:a3:ad:a8:ea:dd:
af:bf:ca:2d:18:06:5e:ce:12:c9:8b:00:25:78:be:73:8e:71:
ef:fd:1c:47:5e:43:1c:35:93:c2:56:2e:9b:46:4e:89:26:a1:
dd:d1:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client