Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: K9GDDHwfoYZnZPIcX3EG3wnlGzIRNxtN8QnJULQuU8k=
Subject key identifier: 21:E8:6D:43:3B:4D:FA:F9:E9:6F:4A:25:25:36:1C:0B:FF:69:32:74
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 0194BC3C31CC1D5103AB77E8B44FBE94F8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 062F
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: IRoDkAbL3na/ETDcItMfzJnqRqDCl8xCBnllcfpA3fY=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:cc:1d:51:03:ab:77:e8:b4:4f:be:94:f8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=21e86d433b4dfaf9e96f4a2525361c0bff693274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:9a:2c:a0:8a:ef:21:86:5d:af:66:cd:fc:
7c:f6:16:6e:66:49:25:c6:80:ac:d6:b8:22:01:f3:
06:58:5d:4e:e4:01:5c:f3:91:fd:4e:37:79:50:e3:
44:0d:5c:68:1f:18:15:a2:e3:cf:b6:13:be:f7:30:
65:2b:19:e1:94:8d:46:7e:d4:24:cb:e5:8b:5b:31:
69:b8:c6:ee:10:9c:1f:26:9d:80:07:4c:84:99:f3:
80:16:56:ac:15:7a:65:17:c7:e8:18:19:3a:27:a2:
0b:18:10:bf:2a:b7:5a:a9:cc:c3:5d:a0:5c:4f:77:
30:7d:07:10:92:cc:51:15:69:1e:73:63:bd:44:c2:
ba:b2:07:62:b8:b1:6b:e0:22:1d:fa:f7:65:23:e4:
71:aa:48:f2:40:ea:7f:a5:a2:4a:ae:67:ae:48:e6:
db:15:53:eb:f7:5b:5d:48:76:21:bf:a4:10:48:45:
8b:f8:16:fe:42:c6:8f:56:ea:55:2e:0d:7c:cd:bd:
21:d8:6e:2f:36:27:81:31:4f:dd:c0:40:0a:e4:a4:
f6:e6:75:6a:b2:63:0b:8c:58:15:bc:9b:00:c5:66:
9e:44:03:a9:df:0b:1d:31:33:12:b3:46:79:93:be:
a3:95:c2:2b:1f:1d:55:89:1f:68:bb:20:69:da:1a:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:6D:43:3B:4D:FA:F9:E9:6F:4A:25:25:36:1C:0B:FF:69:32:74
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9a:03:e2:01:4e:00:b4:df:1c:3d:e9:e9:9c:95:a6:53:bc:
14:11:9b:ac:85:c9:2c:5d:18:84:b8:9a:2d:8d:72:74:be:ed:
96:f2:18:5f:8e:b8:f2:f9:f5:f8:8a:1d:7a:cd:23:e4:0b:f6:
14:40:cb:cb:c3:bc:d1:2b:2b:07:db:db:e3:66:72:90:bf:37:
f4:eb:35:c6:48:c3:5a:1f:32:f8:74:3f:de:9c:a2:eb:b5:b1:
99:2b:76:f9:9f:58:c6:81:73:c5:07:7c:e7:27:01:80:93:ca:
13:b0:04:79:b1:13:e4:49:38:13:9c:9c:88:34:fd:6a:b5:3f:
19:33:d2:a7:85:fc:2a:25:8a:80:9d:40:c6:be:64:da:3f:b5:
96:a8:ec:57:98:9a:f2:2b:b3:08:db:19:14:10:f6:95:27:42:
ff:1c:d8:67:e1:43:9f:e8:ea:bd:0f:a9:21:3a:b7:eb:25:ef:
14:96:b6:c6:6d:cd:b6:9d:ea:e3:db:85:68:78:9e:4d:7b:b0:
5b:d9:68:a1:51:d0:e2:be:4a:78:9b:da:59:45:8b:cc:2a:9e:
49:2a:89:52:48:4a:f2:bd:aa:63:4b:b8:a5:09:f7:7c:17:37:
61:98:ba:56:9e:46:6f:3c:40:e5:b0:50:8d:b2:99:e5:e5:14:
49:54:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:24 2025 by rpki-client