Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: q3+EK9hdmrfO0VTwQI9+rYoccnawTxi0pAKg0HO3wAA=
Subject key identifier: E4:AE:02:24:50:E0:39:5B:8D:5A:DD:FC:A1:FE:DD:A3:EC:EC:DC:07
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 0194BD85A4CE499B9876228F6B6DEA2FCED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 097D
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: g7gtqU6T2h3Pthdisk/Zdwao7XbhXbPx/F+Xycx0Yxs=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:ce:49:9b:98:76:22:8f:6b:6d:ea:2f:ce:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=e4ae022450e0395b8d5addfca1fedda3ececdc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:21:72:b9:aa:50:0b:30:59:c5:4f:c7:61:
6f:34:db:55:bc:d7:16:cc:2f:cd:f0:b0:d0:db:92:
4f:a7:f3:73:40:26:c4:8f:52:5d:88:88:99:21:92:
83:ee:c3:7f:42:21:fa:0d:88:d4:de:92:45:1d:67:
8e:a7:42:ec:bc:e7:15:8a:43:20:d7:5d:ae:ba:97:
df:7d:e0:b6:fd:2f:dc:01:2d:2c:9f:f7:37:bd:49:
b2:2d:bf:af:b9:e6:8f:ba:72:d4:dc:fa:fb:0c:a7:
d3:37:75:fb:80:f7:a1:24:6d:2b:06:81:9f:3c:bd:
22:da:2c:26:64:5d:c9:92:8b:62:66:5a:85:98:66:
93:c1:05:90:e0:3f:2a:26:35:f8:c9:e2:3b:e7:c5:
4d:74:50:79:bb:d8:e5:97:16:6a:9c:d6:d2:4a:83:
8f:2a:77:4c:54:78:93:3c:0f:e1:d0:fb:17:28:ef:
00:56:3a:6c:d0:32:ba:53:92:fc:6c:9f:d1:e1:a5:
6c:c0:33:2a:17:53:3c:8b:89:57:9c:64:53:8b:2f:
f4:26:f8:0f:ce:18:a7:e9:85:b8:cb:e8:58:3a:3a:
ac:42:be:df:77:11:99:40:de:4b:56:98:b9:98:cf:
38:3a:d6:c6:80:5e:35:f6:83:cd:0b:bd:d7:bc:14:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:02:24:50:E0:39:5B:8D:5A:DD:FC:A1:FE:DD:A3:EC:EC:DC:07
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fd:30:e6:3c:4f:16:cf:87:fa:27:b0:19:1c:ea:57:4d:2b:
c1:45:ea:3c:96:a8:87:02:ab:81:df:97:96:77:9e:ec:81:af:
5b:0e:af:38:dd:3a:e8:29:a1:a1:0d:ec:83:56:35:96:87:d5:
89:0d:c5:4d:8f:e0:8e:fd:a5:49:fa:39:d6:55:9c:26:ff:5c:
e1:d9:22:6b:5b:00:1c:1c:76:b7:ff:72:ff:05:74:5d:93:83:
87:05:3b:c6:72:28:89:90:29:cb:c4:47:34:24:57:6d:b3:7e:
d8:22:94:00:2a:e7:7e:87:42:49:14:75:d9:74:90:bb:21:71:
c1:6c:22:40:21:d6:08:df:e9:14:1f:ca:e9:e5:c9:66:f0:14:
a5:ae:53:09:8a:4d:d5:88:ab:a8:4b:29:b2:8d:2f:76:1c:15:
64:91:be:6f:11:7e:5c:b0:1a:d8:76:41:bc:6b:3b:7d:66:c5:
0b:e8:11:b4:38:f9:b7:98:12:dc:28:b6:13:ae:97:78:9d:09:
1a:c0:12:4d:73:89:c5:51:93:9f:0d:c0:46:13:76:6f:14:fd:
ee:c6:ce:e8:6a:a8:b8:ce:e1:67:76:77:bc:82:63:a3:da:54:
60:b3:ef:ca:9b:9f:32:93:1f:91:37:17:a2:57:62:d9:f7:f6:
e5:42:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:04 2025 by rpki-client