Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: FgSfW/1vWPm/0Dy/hiSOY1FZk90m4WYaUfIYb5Xazi0=
Subject key identifier: 50:15:7E:2D:F1:65:0E:F8:2F:B8:CA:DA:95:BE:0B:6E:92:75:0B:E6
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 0194BBCE7C0B8CD18D102529ACC929E3D9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: rNDgjFxu3o6TqKIqT/pK9klzBT4Y0LjsyGc18bkb8i0=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7c:0b:8c:d1:8d:10:25:29:ac:c9:29:e3:d9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=50157e2df1650ef82fb8cada95be0b6e92750be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:88:cd:26:0b:6b:fe:d9:0b:14:e0:ae:91:
e3:90:fe:04:ec:00:f3:01:83:73:93:da:dd:77:d6:
02:6a:f4:62:be:58:88:3f:52:26:23:cc:76:e1:41:
a8:4a:74:bb:38:f0:7e:c8:7a:8f:f5:68:da:59:bd:
5c:bf:0b:65:55:8f:6b:07:a9:e5:6d:23:fe:8a:0e:
0a:1c:3b:04:04:89:a4:5a:75:b3:6d:5a:dc:43:dc:
41:f6:d3:d5:33:a6:d6:c4:af:12:36:10:da:e5:c0:
a7:18:cc:b6:77:6e:f3:78:03:c2:97:fd:f8:08:19:
89:07:02:a0:39:9f:df:32:88:53:b1:01:f0:9a:7a:
e0:c9:98:fc:0a:76:45:80:cd:29:de:0f:5b:a0:e9:
bd:b6:f3:e8:4d:c2:35:cc:22:a0:7a:32:52:91:3a:
19:7b:d1:3f:84:59:3e:d5:58:ae:77:61:86:59:16:
c2:a3:ec:f2:79:ef:ff:8a:cc:45:8a:55:00:ba:9b:
1f:c8:84:35:8d:0a:a4:88:88:37:a9:0c:3d:28:9d:
66:8c:8d:2c:6d:84:99:b8:a9:f8:50:1b:4d:3a:72:
4f:80:7d:99:21:39:95:6a:72:3e:7d:48:fa:8a:25:
09:c7:ec:20:b1:41:c4:dc:cd:c8:01:c6:d3:ff:49:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:15:7E:2D:F1:65:0E:F8:2F:B8:CA:DA:95:BE:0B:6E:92:75:0B:E6
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:43:8e:9b:83:29:fa:42:10:56:62:06:e6:68:b1:49:a3:b3:
37:aa:36:30:45:9a:1f:32:9b:f2:76:50:ab:c5:6a:9d:97:ec:
ad:04:01:90:69:cd:e2:48:d0:d4:b5:9d:ea:ab:92:c4:4c:62:
92:f4:c5:39:55:c1:77:42:1c:6f:c5:de:07:d9:28:2f:84:54:
17:24:4e:d1:05:22:e1:cb:b9:fa:07:b0:22:2b:0b:fa:15:ee:
27:3b:0c:85:3b:28:3d:e6:2d:24:aa:d5:5b:7c:e6:d0:3d:c2:
e8:c9:b4:b9:e0:b9:40:91:4c:ba:a3:6e:50:b3:f3:bc:0e:8a:
70:c1:a1:d0:f6:eb:10:20:02:42:64:7c:54:83:17:12:7f:7d:
b1:15:26:dd:18:93:4c:aa:85:17:33:2e:73:d9:5a:41:e1:94:
f1:e2:8b:35:51:81:10:b7:8b:bd:67:75:ab:82:ff:20:c6:a3:
04:c0:e7:d5:80:e9:20:e2:4b:26:0f:d1:cd:4a:85:c6:45:c0:
7b:83:5a:71:62:23:29:af:10:b2:14:6f:4d:24:70:c2:b1:d1:
86:8d:65:55:aa:0f:20:db:f5:02:80:ff:ec:f2:a4:48:75:b1:
bb:d7:60:ad:b6:57:3e:16:93:75:19:57:fa:a7:9a:5d:b1:aa:
57:5b:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:41 2025 by rpki-client