Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
File: v99XKOyr1W70Y3NWlVhmylRoaRo.mft (raw, json)
Hash identifier: +tWB3I+yaDmlw5lK4S/CK4UdAWfYQJ9aoqU9GuM5/Q0=
Subject key identifier: 00:1A:51:FB:20:90:1F:B7:CF:12:0B:B1:A7:CE:87:04:BB:66:E0:9B
Authority key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Certificate issuer: /CN=bfdf5728ecabd56ef4637356955866ca5468691a
Certificate serial: 0194BCE0675E35A060EBFEEED3CE6A141AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 5ZRHOA8DDg_XhJ8JjCvhTOGiC1w.roa (hash: eWpgjaoVJC0L+xFRvzTJa/HrtM2zzM7SykfE1sq9g2I=)
2: v99XKOyr1W70Y3NWlVhmylRoaRo.crl (hash: zoUg8FMLrziiswIL+6xI/I8ciWHeoJ7FCIrRGswyx0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:67:5e:35:a0:60:eb:fe:ee:d3:ce:6a:14:1a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=001a51fb20901fb7cf120bb1a7ce8704bb66e09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:66:9e:cd:f4:53:2c:f6:6d:7b:58:bb:36:
3b:f7:6f:29:f2:a3:6f:c8:bd:be:f6:c0:da:3b:74:
45:8f:ef:5a:e6:bc:5b:ed:63:e7:b4:86:a9:4a:32:
40:c0:1c:53:a8:84:bb:bb:fc:c2:e4:41:20:e3:47:
73:44:91:0a:7c:9d:bb:c0:fd:53:da:b7:8e:8e:2c:
07:0e:2d:64:2c:6e:e4:cf:d6:99:20:1b:36:42:11:
5b:3a:4d:5e:1c:f2:88:48:c3:fa:ff:b7:37:e6:72:
80:ee:29:40:32:6e:ab:11:f5:57:ee:6b:11:a0:48:
b3:5c:a9:f3:ec:05:14:80:1e:ef:58:e9:25:2f:95:
46:67:32:82:be:63:07:e8:9e:66:2d:72:a4:20:28:
f5:d6:bd:ec:b6:01:ac:73:06:cc:65:ca:a6:fa:97:
95:71:7b:1c:a3:67:f0:69:e0:cc:32:d5:bc:08:74:
35:dd:90:1f:72:62:bb:53:4c:9b:51:a7:5f:f3:10:
b5:72:f8:8d:64:58:5e:ea:1d:cc:2a:ca:37:15:f8:
7a:bc:a4:6e:fd:86:37:35:61:91:1d:87:d4:ab:59:
95:10:b6:65:c5:f2:60:10:8b:45:14:55:65:93:7c:
63:c7:29:32:86:dd:8d:99:27:64:bf:4f:a1:f5:34:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:51:FB:20:90:1F:B7:CF:12:0B:B1:A7:CE:87:04:BB:66:E0:9B
X509v3 Authority Key Identifier:
keyid:BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:d8:bf:8f:e9:4f:8b:6d:0a:b0:67:e9:8e:8d:2a:d3:e9:
66:cc:c1:59:8d:d9:91:75:65:d7:ca:f7:af:74:b8:23:60:4c:
08:93:e6:e1:5f:15:5c:c5:12:5d:64:d6:dc:a6:fe:87:3c:80:
eb:46:e7:5a:e3:29:fe:42:36:70:0f:bf:d7:a8:de:48:3e:d0:
fb:ad:9d:78:b6:65:67:57:9c:0e:e3:1a:47:e7:ee:31:17:32:
c8:7f:c5:e2:fb:ed:fd:8b:94:c2:76:66:c1:ec:52:fc:a2:c9:
d6:e5:e8:01:00:e6:2a:4b:81:95:0a:bf:07:3a:21:0e:f6:a9:
93:3c:63:ab:0d:c4:61:94:c2:3d:e5:df:ba:8f:92:db:91:5c:
f3:3b:5b:c1:8b:41:76:44:64:e4:49:6f:cd:22:1c:3c:d4:14:
10:48:9e:37:4b:c4:2b:c4:ff:91:80:50:f1:0f:cd:c8:a2:78:
24:b5:f7:95:55:df:02:d1:0b:ba:38:a0:37:22:62:49:76:ea:
2e:29:cb:d7:b3:25:7c:81:f7:91:62:8e:42:28:c4:19:53:24:
4d:82:cc:2f:a3:4f:42:27:a0:0a:fa:07:12:f8:62:54:99:f0:
47:45:21:dc:3b:ea:36:73:9b:79:dd:02:e7:57:ae:ae:59:70:
19:f1:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:55 2025 by rpki-client