Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier: VpWbEl8LlN2lZZphIkLKgH9cpTeibsXG6GoVD1EuS7g=
Subject key identifier: 5F:2C:39:04:32:7E:1F:8E:74:03:95:08:35:55:02:E3:0E:EC:E5:6D
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0194BCA9F182E1B0B45E1EDEEEDF27461A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: djaLBHVL6OUDLac23LZtV1VV9cowMhMON/5vl17fdMg=)
5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:82:e1:b0:b4:5e:1e:de:ee:df:27:46:1a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=5f2c3904327e1f8e74039508355502e30eece56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:86:9f:a2:8a:91:15:6d:05:a4:4b:42:35:
4e:bd:c9:61:5d:c0:c2:35:fc:e6:6b:fc:1e:33:94:
11:84:e4:34:f4:11:ae:16:5a:c8:bf:0d:d3:12:e4:
a0:a8:31:49:83:a1:16:d1:b5:6f:f1:c3:ec:d3:b3:
d3:a2:98:3c:c2:90:92:74:6c:cd:d7:3a:74:62:cf:
fa:9f:dd:11:64:2c:f9:08:5b:92:0d:d2:c7:66:e8:
55:ee:90:e2:e5:64:3a:ac:a0:f1:cc:7d:f2:f3:6f:
b7:b8:03:0d:39:1f:10:f6:26:43:6d:a8:18:36:da:
c4:e7:38:af:c8:4a:81:ed:ab:6b:2a:15:9b:0f:0f:
70:a7:44:98:f5:b1:0d:0c:19:1f:7c:e4:80:4a:f5:
33:d1:1a:51:3a:ce:f8:20:07:42:9c:b5:85:c2:60:
2c:e8:bc:37:37:75:60:d4:6f:13:35:d4:4a:72:9d:
28:f2:9b:99:39:1d:03:98:51:95:e3:22:79:b7:a3:
a8:ef:6e:c1:ef:ee:0d:4d:c5:d3:2e:45:1b:c0:e1:
fa:39:12:8a:e5:b1:4c:5e:31:84:b4:24:94:e8:75:
f3:0e:10:14:b8:93:bd:16:85:9c:4f:66:0e:91:85:
47:d7:fe:67:02:f1:6f:30:0d:69:a1:8e:67:f9:95:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:39:04:32:7E:1F:8E:74:03:95:08:35:55:02:E3:0E:EC:E5:6D
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5b:ff:4b:f3:3b:44:47:4a:8b:5c:f9:f5:05:23:f6:70:58:
62:aa:47:e5:31:84:1d:f7:2f:7a:01:75:5a:cf:db:66:36:34:
59:25:d6:d8:66:73:b5:5e:49:14:d7:47:62:f8:db:d4:00:b9:
de:5b:a1:5a:8b:50:a2:e9:11:8b:fb:86:ce:36:09:9e:ce:a7:
6a:bb:38:6f:43:33:06:81:1d:03:2e:37:4b:4b:f4:58:a4:a0:
64:63:1a:5d:56:5b:6e:e4:91:bc:fb:30:5a:5b:fd:ef:41:34:
01:82:23:cb:88:c7:9e:46:b8:29:4b:2b:03:01:55:a8:b2:01:
80:8d:9d:cb:4d:d6:e7:b4:fa:db:ab:86:dc:a8:7d:25:f8:66:
cb:52:f8:0c:ac:85:5c:9b:d8:06:f4:57:71:17:34:79:f9:6e:
d2:c0:98:ba:cd:a9:61:7c:ae:a4:ed:34:fc:95:9e:35:5d:c9:
20:1b:6e:99:8c:3b:f0:02:2f:8f:81:06:c1:23:ff:da:8b:fb:
b1:a0:84:8e:ad:25:69:d5:dc:a5:17:ba:11:00:10:9f:3e:8d:
5d:9b:d3:1a:34:e5:12:79:f8:81:4a:40:49:28:6b:eb:6f:47:
67:42:1d:96:aa:dc:e1:0e:bf:94:27:86:6a:43:1c:9a:2c:7b:
ef:03:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:48 2025 by rpki-client