Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: 5rCP2yUUWbBFnHpvshDCdNOZsFoFWbSbhCqpKOEm0s0=
Subject key identifier: 9A:DE:6A:10:3F:EC:76:B9:88:41:E6:2D:42:4A:26:EC:EF:5C:8B:0B
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 0194BD4E5AC4751CDAD1498D8D0E12E062C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 1B
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: 9I2ROi+xUFMdIiPOi5e8U60g0DbHCc55tbhRSwvWrTs=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5a:c4:75:1c:da:d1:49:8d:8d:0e:12:e0:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=9ade6a103fec76b98841e62d424a26ecef5c8b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:24:8a:0d:5d:56:52:80:a3:3c:86:8a:df:
f3:e0:6a:0e:be:92:75:ce:92:82:ae:5c:71:ed:34:
97:53:b9:3c:61:2c:b1:81:27:8f:76:67:9d:a0:19:
36:55:c6:07:25:7d:61:86:ca:71:45:18:1b:f7:43:
33:b2:de:cd:62:50:58:e2:68:57:34:0f:37:4e:1a:
50:41:8c:bf:62:ee:f0:a5:c5:02:2b:04:7b:0f:41:
2f:c9:ce:bc:78:b1:d0:14:4b:bc:e5:14:13:0c:ab:
5c:fd:23:e0:56:e8:b0:24:ed:ab:53:37:52:62:77:
97:f8:64:4f:d0:a4:81:b4:4d:83:d6:1c:79:95:25:
9d:6a:d9:73:a1:ed:1b:45:f8:e7:d6:8c:62:7b:b7:
ba:42:92:61:6f:a0:d1:db:a1:cb:d0:5d:a6:11:d1:
38:f2:5d:d3:ce:a3:1a:99:c8:97:dc:13:87:35:99:
cf:1a:96:03:b0:e7:4b:ff:5e:cc:a5:c8:6a:ad:a5:
35:85:cd:a9:fa:98:cd:36:a2:36:3b:4c:da:1c:db:
3c:6d:b8:48:ac:d6:12:e2:51:03:ed:b6:65:9c:73:
bc:cb:05:22:63:ff:b8:7f:6f:36:c4:7e:bb:2d:69:
ab:c9:b4:d9:f5:fa:7a:cf:04:d8:34:aa:46:5f:f9:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:6A:10:3F:EC:76:B9:88:41:E6:2D:42:4A:26:EC:EF:5C:8B:0B
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4f:aa:18:a8:3e:b7:53:2e:bf:22:8d:49:3f:02:ec:8d:8e:
af:37:18:3b:57:cd:9d:6d:a1:7f:f0:dd:52:c6:34:a5:70:70:
cc:49:a3:4a:38:70:fd:14:53:b1:d0:12:5c:b8:30:91:e6:3d:
2c:87:a5:1d:7c:e7:81:6c:05:aa:36:24:36:9b:1e:4a:7b:a8:
f4:ae:af:35:09:35:17:5c:e2:36:a5:82:35:79:44:20:33:cb:
1d:37:af:87:a1:ad:0b:55:c2:bc:b6:cb:ac:00:a4:3b:2b:52:
b7:04:1c:37:1b:c0:78:9f:b9:84:04:d7:ff:9b:2c:22:8d:bd:
57:2a:62:37:09:1a:fb:ca:1f:f4:32:f1:1e:3a:f7:cd:e0:97:
b7:b9:75:a8:31:19:9e:a2:71:a8:e0:f1:65:27:c1:8b:5a:a6:
a1:fd:62:9d:2b:10:33:df:94:3b:12:7c:1f:67:e3:ca:29:9a:
d8:c2:69:ea:f6:14:1e:c1:be:64:d6:49:61:7f:d2:24:f0:c4:
04:e7:84:97:3e:70:99:21:74:f2:41:73:f2:0e:8e:a4:4a:93:
f3:b9:e2:57:cb:21:f1:7e:1d:4c:6a:ad:eb:7c:e2:96:93:af:
50:ad:ab:b8:8c:02:cf:ac:1e:fb:98:eb:de:c4:06:c2:c7:c4:
cc:be:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:24 2025 by rpki-client