Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: pmbby0DH0IaPvrfLbHCGNwY8rPB5c5+SYJKvVV1QJxE=
Subject key identifier: F9:56:31:BF:04:FF:F2:87:D4:91:2E:36:4E:B1:24:31:F3:3A:DA:07
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 0194BC051014DA695DD68A7C08254BC904C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: RWuOz4cBoroB4CaXSSn8XmjzhU7LNfkAy088bLVswKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:10:14:da:69:5d:d6:8a:7c:08:25:4b:c9:04:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=f95631bf04fff287d4912e364eb12431f33ada07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:48:41:75:02:0f:04:25:b3:b5:27:de:12:
bc:bc:77:64:76:91:ad:9e:73:46:fd:66:32:f7:db:
ae:fa:82:8e:89:68:47:68:31:69:97:12:34:62:71:
35:65:1c:79:03:d1:87:15:f0:3e:62:52:45:1f:e3:
fa:84:0a:68:45:b9:f3:02:07:64:88:53:ad:66:f9:
8b:18:7a:63:5b:44:04:ad:c6:0d:bb:a7:56:35:53:
b9:4e:53:97:e6:83:73:bd:8e:fe:b7:50:78:3c:28:
1f:9b:1d:5c:0d:2c:f0:8e:09:d3:a5:76:9f:d7:60:
1d:9c:05:6b:96:bf:33:e5:37:d5:ff:9c:96:3a:6f:
39:fc:dc:20:36:0d:86:91:60:f5:b8:ed:89:54:0b:
7f:c4:f5:cf:24:34:1a:c5:83:b2:29:df:ee:87:57:
e1:62:00:81:96:a7:9e:77:ec:df:21:43:76:64:d0:
73:77:24:1d:c5:11:97:b6:6f:d2:23:68:45:24:25:
71:83:c1:10:1f:f9:e5:13:21:dc:b5:9b:8d:8c:8c:
73:64:37:a7:46:97:6e:9b:26:b8:46:71:59:1b:fd:
08:8a:61:e0:0c:b6:a3:23:5b:0f:8a:19:d1:c1:9b:
f8:7f:b6:7f:9f:55:c4:d2:9d:06:40:1c:9d:f7:d4:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:31:BF:04:FF:F2:87:D4:91:2E:36:4E:B1:24:31:F3:3A:DA:07
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c7:69:32:7d:54:6a:97:07:a4:ae:57:a2:93:5f:37:37:60:
9a:ad:3a:cc:80:4d:f4:5d:23:bc:c0:45:67:50:32:fe:d1:d7:
f1:57:a1:36:bb:6c:12:b0:cd:95:45:87:2e:55:23:79:47:b7:
2c:fd:2c:09:cf:aa:22:1c:8a:5f:47:80:5d:36:16:cf:ba:22:
78:0e:ad:92:4f:fc:1a:e6:6c:c9:47:05:3b:40:b9:70:aa:bb:
8f:b3:26:ad:19:6d:b5:7b:5a:2b:de:f9:6f:d7:93:a1:aa:24:
dc:7c:78:b1:21:70:cc:b6:cc:bd:51:8b:bd:16:b9:09:e2:4b:
0e:38:6f:b6:26:ac:ac:96:17:a9:c6:dd:ee:bf:8c:24:83:ca:
a7:d0:2d:45:fd:32:83:ac:a2:29:c5:f8:2f:80:f2:b3:eb:be:
84:79:5a:a6:4b:bc:d8:89:b2:66:5b:8e:e9:07:6a:c1:ba:62:
c5:41:7c:ad:14:d0:22:22:6a:7b:1e:d3:ee:e7:ff:cb:bf:85:
ce:b1:3e:a9:8e:17:70:cf:fe:6c:4d:0d:08:7c:9f:44:ad:8e:
47:6d:e1:6d:59:aa:fe:0c:0f:0f:e2:ac:09:29:9f:08:b6:07:
2f:9d:18:0f:7a:68:1d:0c:3c:b9:a7:e3:e8:38:66:f7:ca:f9:
52:4d:9b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:56 2025 by rpki-client