Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json)
Hash identifier: yOzl8DlanydK0aLc9hL0oaHAu0whL6bBVepxnqRkEf0=
Subject key identifier: B2:76:85:2F:18:CB:88:58:60:06:EC:31:CE:E1:04:81:D5:7C:98:A9
Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929
Certificate serial: 0194BC04B662DCBC8478660CC3D5D2F44FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
Manifest number: 3A
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: qz+YHQNxDw7FoHGa5bko6cakFW/ZWwoH4uUh/61C62s=)
2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:62:dc:bc:84:78:66:0c:c3:d5:d2:f4:4f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=b276852f18cb88586006ec31cee10481d57c98a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:22:1f:8a:9d:2a:9c:99:9a:32:e8:61:8e:
34:25:f5:06:62:53:13:a5:3c:2f:cc:cb:d0:ed:59:
a1:21:34:f8:2a:b6:e3:20:a3:77:58:67:58:7d:ea:
23:e1:cf:b5:99:88:53:d5:fb:bc:45:02:83:a9:37:
a1:51:81:d7:f1:c2:9d:d8:f2:e8:34:bd:47:d8:fa:
af:48:44:6c:f9:fd:b5:28:28:09:fb:e9:76:0c:ad:
ee:bb:d0:28:44:5f:c8:5a:66:7c:3a:cb:59:91:d9:
2a:74:6f:70:26:9c:3c:b5:44:6d:2e:bb:be:41:14:
8d:26:01:f2:7c:39:9a:fe:67:ec:64:04:d6:27:be:
f7:f2:78:c1:55:7e:0a:d3:0c:95:d1:36:3a:aa:28:
4f:a3:80:11:87:14:d4:32:6d:3f:0b:e0:c0:f4:b4:
d4:32:ce:77:fe:d2:05:ed:38:98:6f:4e:dc:c3:98:
b8:89:31:74:14:18:9e:24:12:d1:cf:a2:9d:4c:ec:
b1:b2:4f:fd:33:b5:5f:ea:4b:48:0f:5b:b3:05:1a:
21:1d:90:3a:35:30:d5:c0:f7:ed:1e:5f:8f:8e:54:
6b:24:d9:7f:09:aa:08:9c:4a:98:56:95:a4:7b:d1:
75:6e:ac:8b:5d:e1:2d:2f:5f:9d:9e:01:ea:69:a5:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:85:2F:18:CB:88:58:60:06:EC:31:CE:E1:04:81:D5:7C:98:A9
X509v3 Authority Key Identifier:
keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:97:54:6b:ba:c3:b0:9c:95:83:bf:f8:9f:54:d6:b4:81:
0f:9e:3d:d6:ae:74:09:8a:ad:24:15:54:5d:18:e9:12:89:a6:
51:93:e6:f0:9f:d7:63:67:a8:3a:ff:77:64:71:a1:ce:c0:1c:
22:fb:f2:23:d4:e1:ba:1e:fe:ed:bc:db:45:39:77:a2:92:df:
c6:59:1f:f9:1f:c5:02:06:ee:0e:57:a8:34:63:68:2e:e2:8d:
f8:f6:35:27:1c:28:b3:f6:9d:34:09:d7:fa:eb:38:e7:4b:ba:
d7:8e:f7:01:67:d8:6c:70:67:29:7c:b8:cd:42:ed:28:62:f7:
47:f2:c3:0c:95:f7:f5:48:14:23:ef:f4:bd:c6:f1:20:ba:e8:
2c:b6:59:46:71:1b:50:c4:3c:1c:dc:eb:eb:46:ec:df:2d:df:
cd:6c:21:a2:24:37:99:dd:62:5d:38:5f:a8:c3:fc:66:14:24:
9f:0d:7b:03:ef:12:b7:ab:a1:9e:c0:d4:db:b3:87:1f:f0:3f:
48:55:83:23:d0:7a:40:aa:83:46:5c:64:2c:92:eb:de:3a:d6:
7e:ab:be:1f:1c:16:91:65:76:c1:3d:19:b1:a8:5b:56:3f:05:
ae:2d:f2:eb:94:25:09:e8:c6:5e:d8:b7:d8:1c:d2:0e:81:88:
02:a5:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client