Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: k5qoNkjaQQqEpc5VFYD3r0+qSx61mzgWw9NwyE0GaTI=
Subject key identifier: EA:5A:4E:93:D6:A6:DD:4C:1F:43:37:56:5F:12:37:96:40:15:1B:07
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 0194BCAA0145FB2B9DBC156DCDF7A3395975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 0A47
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: ArXM7RJDnDKHHLBE21eoL2lE76c.roa (hash: n1+IHvUCKe6KRZXjngvQSrArHwaB9mNvliy4XN3wMhA=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: ml25i+gDH00huaeP0KLg7GFrqlUe3pBP6fm7NSYxVaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:01:45:fb:2b:9d:bc:15:6d:cd:f7:a3:39:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=ea5a4e93d6a6dd4c1f4337565f12379640151b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:b8:3f:46:dc:c3:72:18:3d:f7:ae:26:14:
77:02:a4:64:0c:29:4a:65:90:c7:2b:48:ef:7b:c8:
04:f1:e5:5d:ad:7b:0c:80:8a:53:01:87:fe:cb:c4:
dd:51:10:39:eb:46:21:cb:9d:61:50:5e:30:9b:bc:
74:6a:06:a4:5b:4a:ac:ab:15:0b:d5:98:b2:13:01:
2f:3b:d1:8e:00:7e:80:c8:52:51:a9:c1:07:23:ae:
2f:28:90:91:8b:37:17:70:1a:08:26:b8:f6:03:03:
1a:db:1a:2a:ff:14:77:9b:60:56:7c:ce:81:ae:2c:
ce:f4:16:8c:53:8f:53:bb:65:5c:5f:34:aa:71:e7:
6c:f2:b3:96:4c:43:1e:69:a5:59:da:7f:37:29:31:
0c:97:b2:b8:d7:62:51:30:4e:73:a6:da:f6:c4:02:
18:4e:80:db:60:c9:e6:97:ab:ca:bc:47:f7:1c:24:
4a:d6:f1:86:a6:5f:72:f6:e3:ab:6d:bc:a0:1e:5c:
7c:b9:7a:e4:0b:78:59:5f:2c:10:72:14:17:5d:44:
dc:76:a6:d5:b8:39:6d:25:56:21:a1:4d:1e:0d:9c:
8f:7e:72:4f:5f:a5:aa:61:5a:46:5f:86:7b:d4:a0:
07:b3:6f:89:6a:03:a0:5a:b7:b0:71:18:12:6e:4b:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5A:4E:93:D6:A6:DD:4C:1F:43:37:56:5F:12:37:96:40:15:1B:07
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:39:08:c1:71:6a:3f:3e:bd:ed:45:78:f6:14:c8:2d:05:e9:
8b:f6:12:d4:32:11:2f:de:2d:95:c7:f9:86:2a:53:0a:ef:18:
53:32:53:76:36:a0:1b:4c:cd:16:7a:87:70:7c:78:13:66:f1:
7c:51:73:aa:f0:bf:38:1d:bd:b8:4d:70:34:7d:5b:c2:ea:2c:
af:1f:43:02:b8:02:c7:a5:a7:44:15:fb:a9:fc:ab:a7:c0:b5:
7a:3e:19:ee:5f:53:65:b3:04:d1:0a:0d:6d:05:03:1f:b7:28:
02:d8:8e:a6:dd:6f:95:70:ae:68:61:bc:21:cd:06:ed:7e:6a:
24:cd:fd:6a:6d:c6:68:66:6e:55:95:7b:8c:66:e1:4a:ea:37:
d1:34:98:d6:e0:ad:b1:fc:68:94:1a:b7:e4:ab:16:30:45:81:
80:f3:32:98:95:12:59:3b:e8:66:ee:4d:d3:7e:65:ba:53:4e:
5c:d5:ac:b8:c9:20:cd:a4:1a:60:c4:3e:2b:d7:67:b7:96:98:
42:8d:a9:80:61:5e:2e:50:a7:1c:da:75:91:d1:4a:b8:af:29:
61:81:c7:19:e6:b0:a2:e8:ad:a6:42:9f:37:48:a7:85:e7:72:
24:f9:60:0b:fd:33:81:4f:95:61:37:a9:20:01:c2:51:8b:68:
8f:9e:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:42 2025 by rpki-client