Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier: jVibtSxDS5q/YxIkZCcHZPP4NqeHfpFO6/YukzVsJds=
Subject key identifier: A1:94:CB:D6:C2:6F:F1:66:EF:A1:A8:99:BA:8C:E8:6C:BB:76:87:9E
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial: 0194BC3BD35828268682CA47346E3041DADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number: 094C
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: NC+kiVW5+rto5qXvCJyuABEkaqY/TTxBaBEIEaOcmBw=)
2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d3:58:28:26:86:82:ca:47:34:6e:30:41:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=a194cbd6c26ff166efa1a899ba8ce86cbb76879e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:2f:d4:25:63:c6:b5:05:fd:51:4b:c0:4b:
a9:04:6d:11:78:35:06:98:9a:c3:90:bd:37:af:d8:
d4:d1:40:96:2d:3f:0c:bf:39:1b:18:79:1d:4b:4b:
a6:b1:c9:17:54:7c:3b:f9:98:9f:65:49:42:cc:95:
00:f7:81:90:4e:e8:ac:91:a9:09:a9:06:80:10:9a:
4e:6d:16:ff:f6:fc:ce:f9:f7:af:7d:eb:b8:00:d4:
aa:fb:aa:38:17:d5:92:bf:3c:51:38:24:c2:6c:a8:
53:79:42:97:92:4d:05:ab:c3:ce:4d:55:b4:9c:49:
da:73:44:3d:ad:91:ba:a9:54:dd:63:28:34:40:4e:
31:b6:78:fb:dc:a1:ce:03:8c:62:29:80:36:80:37:
bf:a2:72:08:60:43:72:d3:ad:e4:8d:81:1c:bf:a5:
af:60:3b:8a:7f:74:53:0e:69:db:f1:51:94:3d:ef:
56:5a:ca:df:dd:dd:6f:0f:29:a1:a5:74:47:c5:d4:
e3:df:10:84:aa:6e:18:39:9b:81:02:aa:4a:53:c1:
37:40:f5:32:0a:c8:b4:79:ab:07:26:10:27:d3:9d:
49:96:4a:70:ec:34:48:75:37:15:b0:54:c4:2b:df:
74:4c:41:5a:82:d9:73:1e:2e:71:fe:f1:9d:19:d7:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:CB:D6:C2:6F:F1:66:EF:A1:A8:99:BA:8C:E8:6C:BB:76:87:9E
X509v3 Authority Key Identifier:
keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:49:71:86:d9:b9:2c:52:93:97:60:1c:71:ca:41:98:cf:fe:
2e:9f:60:16:2c:5c:da:74:ee:5d:4e:ce:d6:c9:4e:c8:2d:66:
e5:69:88:bc:5a:ef:d9:d7:72:57:7f:44:70:5d:cd:23:f8:5f:
a1:9c:87:d7:03:10:db:33:a0:28:6f:22:32:57:9f:33:1e:b9:
20:9a:5a:e2:c8:8a:98:b5:7f:b0:c7:47:18:d5:28:58:4c:55:
b4:9b:29:80:08:de:c1:2e:0c:3b:da:b2:cf:3a:30:ae:8a:3f:
d9:ee:33:44:5a:9a:c9:4a:f7:9a:4a:73:a9:f1:4c:d3:e7:91:
87:93:c0:0a:d9:31:1c:87:cf:44:f6:7d:d8:d9:91:6f:9d:06:
4e:8f:16:7d:00:eb:d5:b6:8b:86:54:21:57:ab:83:6b:8e:2b:
64:30:e9:fb:f0:dc:3e:08:8a:d5:97:3f:5d:3b:a1:08:96:2f:
9a:a2:1c:51:08:07:7b:62:8e:c2:30:d8:7e:7f:37:90:df:03:
f3:af:44:ab:8c:31:43:ec:4a:bc:4c:f2:4d:f1:61:6c:cf:86:
8a:18:62:ee:83:82:4b:cc:91:c8:05:44:d7:0b:6a:e5:96:97:
12:54:9f:5f:d0:eb:45:6f:79:79:b6:4b:7e:f1:bd:90:70:0c:
7e:f8:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:00 2025 by rpki-client