Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File: 9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier: sBSfF9qiyg5Q0X4bC1TKVsvzJHQHpDSLtmH4sNh3cAs=
Subject key identifier: DA:3C:2B:9A:E9:D9:6D:BF:28:E0:0B:5C:E6:CC:9F:85:B1:60:65:95
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 0194BBCDF7E4E4C7674D68C97FDFA082031D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: FDV2lH9g8Tene/UB8cCJeU2kcfk+MfsjSiWVQZa4OJM=)
2: ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa (hash: n7Rzh1zK0MckYzOS9a8lwv/AGXV+Jr0CvxhzGO4UHW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f7:e4:e4:c7:67:4d:68:c9:7f:df:a0:82:03:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=da3c2b9ae9d96dbf28e00b5ce6cc9f85b1606595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:11:9c:7d:b8:87:57:f1:cc:19:43:72:aa:
96:6f:ad:8d:d6:35:95:3f:51:30:14:37:bc:40:64:
31:c6:54:6f:84:8d:e6:dd:11:3e:c1:d2:d7:86:e2:
2e:5e:ef:e5:7b:6d:17:7d:2f:5a:f4:e9:19:ae:5d:
b0:c5:b8:7b:6c:47:a0:45:3f:de:c2:9e:54:9d:8e:
32:1f:ca:92:fa:df:5c:9f:62:1d:51:75:73:77:c9:
9a:72:1b:ed:4a:50:2c:84:c8:6d:ed:a5:8d:6b:e0:
49:6f:d8:7f:55:59:ac:6e:a3:e9:eb:08:35:ab:a4:
c4:9a:0b:fe:10:0f:0b:61:bb:c3:66:75:ab:b9:1b:
c3:3e:21:53:80:ec:d6:8c:4a:f5:93:b1:8d:5b:ed:
66:6a:2b:d5:0e:14:b2:da:61:71:94:e9:ea:be:7b:
ea:38:4d:79:08:1d:24:2d:99:e1:5d:cd:19:33:fc:
bd:00:e8:b1:56:a7:c0:88:84:bb:68:80:4b:f7:8e:
b3:6b:6c:ba:30:46:ac:17:1d:f0:ea:2a:f0:db:fd:
fb:38:53:d7:1e:6e:6a:1d:7d:e2:50:24:5f:7f:66:
14:8b:9c:a6:83:63:e0:ed:a7:8b:10:56:61:8e:e6:
5e:7e:10:54:54:61:5e:f4:37:ed:9f:9d:c6:2f:0a:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:2B:9A:E9:D9:6D:BF:28:E0:0B:5C:E6:CC:9F:85:B1:60:65:95
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3b:ed:af:4a:c9:a3:04:88:f8:fb:ea:4d:f7:26:59:dc:80:
81:06:65:e0:74:45:8a:5a:a2:e3:b7:62:e6:48:13:3a:6b:ff:
0c:1a:1e:32:7b:56:8c:16:d4:28:de:8d:a7:ec:42:5b:99:7e:
8d:42:06:5a:5b:8b:16:1c:ac:03:91:7b:bf:c3:48:f7:4e:42:
0c:c7:ef:3d:eb:0f:6d:34:f5:9d:31:1a:98:4a:b1:9d:b7:bd:
15:8c:21:dc:52:45:8a:bc:08:8a:4d:6f:e1:fa:78:97:19:45:
d6:3a:5f:de:a1:31:5d:1c:b3:64:f5:09:34:5a:a6:61:f5:d6:
ac:fc:9e:e7:84:2d:80:8d:f9:bf:62:89:1c:b3:71:eb:0a:3c:
a6:c6:2e:ac:75:7b:f6:ff:f8:e7:00:4a:62:f9:41:1f:d3:de:
c8:15:a2:f6:36:28:26:95:e1:98:06:ea:32:7e:66:41:fc:f6:
d6:16:57:d5:05:59:8f:25:e5:51:59:4e:49:42:39:58:35:73:
ed:00:bf:47:70:a8:4d:ad:74:05:e2:b3:f7:a0:db:61:ec:ca:
11:92:f6:53:96:9e:63:9f:30:4d:9a:5f:42:9e:c0:7d:9c:d8:
cc:42:ce:86:bf:aa:64:db:a6:4d:e6:a2:0b:e8:fa:34:34:9a:
a3:ab:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:48 2025 by rpki-client