Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: C7KCdv409VjbU5Kni9BNRk2MRtRV/TEgZXU4+KMEMsA=
Subject key identifier: A7:BF:1E:AC:0E:E9:CE:AD:0B:B2:FA:BB:74:B8:03:09:4B:43:47:AE
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 0194BC3BC7CFB10897CF1A8304097D561FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: 7oLKWOQxbRu6F/1jG9W/P4eNBF9QmZITLKEBO0Br0Ho=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:cf:b1:08:97:cf:1a:83:04:09:7d:56:1f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=a7bf1eac0ee9cead0bb2fabb74b803094b4347ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:22:3a:f4:75:37:77:2d:00:fe:9b:d5:30:
ca:7c:97:e0:81:27:dd:6e:9b:7a:67:d4:4b:3c:60:
ec:20:e2:c5:d0:65:2d:ac:a0:9f:a0:91:88:73:3a:
47:2e:4d:59:71:a0:07:13:9b:ff:62:34:ac:d5:c0:
71:5f:7d:5d:6c:1e:f1:d8:5f:e5:86:81:4a:23:b3:
9e:54:93:86:5d:ae:56:b2:7c:19:ae:af:bc:01:3e:
c4:af:13:87:9f:08:28:c4:33:d2:79:e7:d3:e1:18:
64:41:f9:6c:87:23:7f:34:3b:33:8b:ab:d4:b2:8f:
98:a3:43:5c:c4:09:ef:72:83:98:24:c6:34:ef:4f:
b1:59:ca:46:aa:1f:b3:d7:07:ef:94:13:d5:fe:b1:
09:78:3c:a5:af:6a:94:bb:da:12:a5:43:be:03:35:
2b:0a:d5:04:d8:ab:b6:f4:17:e6:da:5e:b6:4f:b5:
b1:b4:1f:4f:46:07:18:f4:15:42:69:79:67:7c:41:
79:b8:a3:8c:d9:aa:49:d9:d4:51:de:cd:7c:23:4b:
db:e4:4c:19:19:13:b8:98:7b:d9:35:c1:7e:e3:b2:
31:e4:45:f2:7e:e0:42:35:ee:d0:6e:7f:0b:17:29:
a6:a7:dd:3d:af:ef:ba:d5:90:32:46:f0:0d:ac:41:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:1E:AC:0E:E9:CE:AD:0B:B2:FA:BB:74:B8:03:09:4B:43:47:AE
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:35:44:f6:6e:a6:a1:ca:bf:82:f5:ab:ab:75:48:cf:20:
12:ef:3e:c9:9a:0c:03:1f:a8:a3:42:72:4d:42:7e:e3:05:8e:
05:9f:33:b6:4e:1b:f5:c3:41:8a:9a:51:59:fb:1b:16:9b:df:
42:d1:71:a8:c9:70:68:97:b4:f9:00:5e:e3:7d:c2:2e:aa:6f:
85:d2:1a:d7:5d:90:31:12:9e:11:2d:a3:d5:dc:d8:74:e4:cb:
f2:4c:73:b7:4a:a2:5a:81:2c:8c:b8:63:b3:7d:9b:5b:e3:4f:
e3:fe:fc:bc:37:04:cf:b2:83:bd:ab:39:3f:f1:27:04:ca:da:
e3:4d:5d:8b:7c:76:11:48:78:cc:51:d7:89:76:e1:f5:da:a0:
c3:10:72:16:ad:d4:1e:14:63:19:30:e2:46:49:3b:63:fc:5d:
da:7f:ef:8c:74:d0:0b:77:38:ca:11:04:89:4b:81:43:23:a5:
3b:1f:50:ca:6e:f9:a2:9a:97:be:25:6e:bd:0e:7b:55:b2:bb:
95:5b:bb:38:53:57:8d:b3:79:19:90:a4:91:c4:89:1b:a4:37:
86:2b:25:c0:ef:26:ef:b4:0a:38:11:5e:2a:e7:db:43:80:ef:
46:ed:d7:8e:be:d7:c4:aa:dd:ac:40:c5:95:15:98:f0:65:8b:
57:56:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:20 2025 by rpki-client