Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: InXUR9lJzivGE7UYxTd51iF+As6sHVBUkPZrJc86hH8=
Subject key identifier: 43:28:C5:3B:83:A3:2B:10:FE:5F:07:C8:34:C7:D0:89:61:0A:AA:43
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0194BD859031EE38BFF3015F6B215FDA6A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: sI7f076/AWnfdiDECzBuR0kt9zcLV2c7FPlH64MWtrw=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:90:31:ee:38:bf:f3:01:5f:6b:21:5f:da:6a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=4328c53b83a32b10fe5f07c834c7d089610aaa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:7e:d6:e7:17:a1:9c:f3:29:1e:07:6a:04:
16:d9:8e:93:ba:c2:68:86:40:36:6d:83:70:78:af:
cf:74:92:c1:6f:3a:1c:c4:75:00:09:69:30:1c:3a:
a0:e6:f1:98:35:ae:bc:f4:8b:c9:60:5f:17:d9:d8:
ab:44:72:11:4d:dd:0b:f9:b0:aa:96:6d:68:b5:35:
7d:cf:17:54:10:bd:d1:07:2d:eb:5a:1d:9f:14:94:
4d:24:7a:67:8b:16:b2:77:4a:99:0d:74:c3:67:1c:
57:9e:ad:7b:fa:5a:7b:45:88:f8:08:55:b2:0c:9e:
98:be:a9:b4:98:52:d8:c7:10:4c:d5:94:c8:0f:5b:
44:6f:2a:1c:29:fd:51:06:16:0e:bc:69:e6:02:87:
04:15:88:da:ea:8f:9b:f7:d8:84:d1:b3:64:cf:91:
f5:45:07:ff:0a:0c:63:94:f7:91:4c:07:7f:b6:e1:
59:81:09:3b:fa:20:43:dc:6e:25:50:db:c5:11:39:
d7:7b:5e:2a:e8:f7:00:54:10:b0:17:fa:fd:cd:0e:
68:ae:a4:fd:f0:88:af:6f:91:d9:61:a2:19:93:79:
75:6b:84:81:79:46:21:46:2d:02:e6:93:ff:34:33:
3a:ea:66:3b:5c:40:6d:19:d4:d2:ae:67:b5:5f:3e:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:C5:3B:83:A3:2B:10:FE:5F:07:C8:34:C7:D0:89:61:0A:AA:43
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:82:7f:f9:08:e8:7f:e3:eb:65:9c:58:cc:82:58:d6:41:55:
5d:78:80:10:a9:18:bf:5a:5e:44:32:41:2e:91:ea:05:ac:e0:
ef:d1:e1:88:f1:4a:59:18:e6:5d:7e:14:86:8d:0c:92:a4:fb:
d1:1b:cc:d1:ed:3c:74:49:b7:91:ac:c6:b2:1a:f0:46:18:36:
65:e9:cf:5f:5d:cd:2b:82:df:5f:d9:0c:bb:28:6e:55:49:ad:
40:0b:a8:2e:95:16:a4:6a:a8:77:f6:dd:f0:10:2a:57:66:31:
3d:1f:ce:3e:b0:62:3e:cb:dd:fb:0b:0a:ca:28:62:06:ee:43:
2e:bd:22:61:c8:83:16:47:88:88:79:22:10:ce:64:ec:d1:f8:
c9:9a:89:80:89:59:c5:87:01:34:10:50:43:f6:74:7a:6a:0e:
91:51:ed:90:59:a9:c0:23:45:ac:78:ce:63:48:ab:23:7d:d1:
f6:19:eb:0a:e5:71:63:6d:e3:c6:c4:66:3a:c0:37:75:3b:15:
3d:fd:cc:7b:83:09:17:ea:a5:63:96:27:8a:d9:cc:bb:62:73:
df:b1:8d:12:77:5d:f2:89:db:2d:5e:ac:c6:5a:7e:d1:79:40:
4c:91:99:3c:62:80:c8:3c:ca:9a:47:20:4c:ab:ce:a0:10:47:
3c:df:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:56 2025 by rpki-client