Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File: 9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier: aIS1OaYLSkR0wGl7gcKLqYYd1NxSGm242N474aKf1ag=
Subject key identifier: AD:5E:28:B0:D9:32:10:17:F2:63:C1:5C:59:95:9B:2C:B2:13:2A:84
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer: /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial: 0194BBCE1C41663B4A5F5BD96F1E7774CD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number: 0C17
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: FSrRUK2yjODdn2Q++VUvoIYFZnXlBXi0b2b0MQiL0r0=)
2: wOcuTBMxNd4VNkifbjkEPq5QBRM.roa (hash: jOCaPE7vIzLxLDz75Ne5jz/kVuSxy/EH3LkXhZB0gk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1c:41:66:3b:4a:5f:5b:d9:6f:1e:77:74:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=ad5e28b0d9321017f263c15c59959b2cb2132a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:ca:b2:47:dd:14:64:84:dc:27:54:e9:0e:
98:b9:4c:5f:88:48:b7:cb:be:44:00:e7:f8:65:47:
b0:06:24:5e:e5:fc:04:4d:4c:cd:16:31:7c:b9:54:
64:9e:8f:02:4d:37:e2:2f:d8:73:93:35:b0:7c:2a:
5c:b7:f3:4c:20:7d:3e:43:1e:a3:17:43:81:c2:ca:
5f:df:4b:80:2f:fd:07:c6:d5:25:e3:58:a5:ef:aa:
65:8c:c2:28:38:1a:79:e0:00:69:ef:db:54:7e:43:
76:02:68:16:16:bf:86:ef:00:5d:6e:d5:8e:89:c2:
8d:bd:83:be:86:19:71:3e:d5:ba:18:db:d5:43:98:
9d:63:56:d4:e1:c5:1c:34:f5:5a:08:b0:b0:f3:e6:
0d:be:91:c0:1a:cf:fd:23:bd:8a:ad:36:63:44:68:
5d:8b:c4:98:e8:d4:f0:c2:e1:b0:a6:eb:5f:a5:bb:
2c:29:c4:fd:5b:87:59:31:cb:a0:64:e2:97:d0:5c:
38:df:12:97:af:bb:4b:b2:d6:07:e7:d0:b0:93:4c:
fd:f6:d8:e7:1d:3f:18:e6:21:3e:81:55:7b:ea:4f:
d0:ac:a8:79:4e:7d:4f:e1:44:41:9f:d3:81:00:b0:
5b:1e:7a:f0:be:fa:b8:51:43:7a:82:a9:d6:70:52:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:28:B0:D9:32:10:17:F2:63:C1:5C:59:95:9B:2C:B2:13:2A:84
X509v3 Authority Key Identifier:
keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f3:03:c3:5f:48:15:b5:1c:6b:99:dd:d0:b8:78:5a:01:b1:
5c:b2:7c:bc:86:ec:f7:c1:48:28:20:d7:4c:1c:18:c4:cc:2f:
6a:ee:c4:18:5d:50:19:e9:32:c2:82:09:55:d3:03:75:eb:15:
32:11:6d:26:50:7b:d2:e8:15:0a:2f:e0:5f:a6:de:d2:63:ae:
c5:18:53:08:48:6b:10:34:d1:ff:5f:2c:a0:c8:c9:a9:69:19:
5c:23:80:31:ab:80:f0:3a:e5:4f:62:56:df:a2:7d:f7:8a:01:
13:ae:70:b8:c1:91:4a:ae:c7:74:70:84:f0:b0:89:fe:86:88:
74:f3:b9:31:9e:37:b4:13:6d:3f:ed:b5:76:7e:61:81:c4:17:
de:d0:05:25:0a:e0:f3:e2:84:0c:94:76:ef:24:55:11:13:37:
47:86:bd:1f:1a:38:89:d1:96:77:d4:52:71:cf:e5:ec:19:90:
32:d4:5a:56:ef:0f:4f:01:09:ec:74:35:53:cf:70:45:af:78:
53:b6:a9:f1:f1:3e:1d:2f:9f:62:12:f3:08:e5:2a:8d:ed:9d:
99:3a:cc:f1:52:4a:34:c5:3a:ce:ab:83:f8:cc:9a:46:8a:32:
ec:ab:42:96:6a:10:09:d8:ed:c3:5e:10:36:ef:27:2f:3e:d5:
e3:ab:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:27 2025 by rpki-client