Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File: 5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier: bWPYEc+V1hbV+3PZKVyW03vWY5v9BMevltZVrPCxyC8=
Subject key identifier: 70:D9:BC:CE:B7:AE:FF:49:E5:44:E2:D4:92:D3:57:52:61:10:16:BE
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer: /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial: 0194BBCE5292645AE895D8A96066E21EDB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number: 0812
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: rgI3s4BpChg5t+0Xto+0Ca+A7Svhgm9mmSiOqXaI7AA=)
2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:92:64:5a:e8:95:d8:a9:60:66:e2:1e:db:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=70d9bcceb7aeff49e544e2d492d35752611016be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:e6:e1:5f:46:c9:4f:e5:d8:6a:91:6f:a3:
0d:5c:bd:cc:73:c4:57:10:ef:95:d7:b9:3c:03:f4:
93:2e:67:43:b4:19:de:5f:c8:d2:54:a9:36:cd:7a:
2f:ac:c7:c7:49:90:79:66:87:51:2a:d5:dd:93:06:
b0:ff:d4:30:1c:8e:3c:d2:94:b8:f6:0e:87:2a:02:
57:95:40:70:88:19:8c:dc:ce:4c:5b:32:48:49:53:
4c:09:f9:b7:b1:2f:30:d1:8a:65:db:4c:68:62:ea:
d0:f6:0f:e0:71:3a:d4:cd:b2:85:0c:c5:04:4a:5a:
82:70:8e:3d:a4:9f:57:15:59:cb:58:a1:ea:4f:08:
bf:fd:2e:bf:ef:4f:7c:fe:50:81:9b:33:02:54:db:
50:c0:48:3e:98:09:f3:9f:33:85:c2:5f:b4:2b:df:
59:4f:19:94:a7:aa:4a:2d:1f:e0:d1:8c:e7:18:0a:
c8:ae:52:97:0d:7b:f6:39:f1:d4:99:a6:68:9f:71:
30:59:0d:d9:23:c6:5f:ad:0c:1f:89:83:e7:6f:71:
26:0e:9a:f7:90:cb:67:f7:52:1e:08:1a:df:c9:b9:
c4:db:cf:e4:8b:33:b9:c1:cc:e3:52:3f:92:9a:14:
64:29:e2:69:76:bf:10:3a:37:43:77:ec:94:1f:eb:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:BC:CE:B7:AE:FF:49:E5:44:E2:D4:92:D3:57:52:61:10:16:BE
X509v3 Authority Key Identifier:
keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0f:e8:4c:af:7a:0d:16:4c:91:1d:3a:b0:c9:ec:89:68:17:
8d:8d:c7:30:4d:56:6c:b3:3d:6f:56:39:b7:b4:a2:ca:bb:57:
25:6a:20:37:39:b9:ae:57:4f:c5:21:3e:d1:5d:fe:93:fd:96:
83:82:04:a0:fb:20:b3:5e:6f:58:1c:2e:6a:74:f3:8e:43:ad:
c4:5c:93:66:6d:90:c5:02:4a:4d:1e:77:a2:fe:9d:8f:0f:82:
b6:76:1d:1a:7a:ec:8e:2b:b1:ba:85:8e:b7:fa:f6:ef:9d:0f:
c1:72:21:64:b3:99:35:31:c6:18:3f:76:c0:21:1b:45:7b:77:
ec:8f:16:90:66:a8:cd:df:cc:06:1e:2e:31:6d:fb:ab:3e:fb:
a1:96:e4:29:c8:f9:01:8c:04:cf:84:16:86:a2:be:63:29:98:
9a:6d:4b:5b:b3:01:f8:47:15:cf:34:b8:42:31:94:39:54:be:
0a:14:c4:88:a8:a4:4d:69:29:f3:a1:2a:f0:55:f0:fd:68:eb:
93:ae:b9:d8:29:a7:7d:ba:25:b3:3e:57:ed:a7:da:ca:5b:31:
19:09:e4:a1:c6:01:ec:ab:f5:5b:a0:d2:bd:02:e8:90:72:81:
90:e3:6f:af:ba:44:bc:59:d4:47:68:7c:48:f2:bc:7a:51:d9:
e1:dd:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:56 2025 by rpki-client