Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier: k7auzYoTHe1BaIcn3xsDjPNdYLjTWoSSJkPK4efszEk=
Subject key identifier: 8F:FD:B9:8D:25:2D:A6:0D:35:BD:5D:B4:FF:9B:F0:85:FB:3C:A4:5C
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial: 0194BCE097D17555D402A62B25E0DA182751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: 6vA2EricEO7tQzErlKtMfYBeNs0sIWIqgnTKNTtKJ3U=)
2: yAxzfi9JXUul0TO1jK5Ldw1Rthk.roa (hash: lWeFfnhZvBmgn+p8KY5mqn1eMKw9nzLuCchH9PtGLK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:d1:75:55:d4:02:a6:2b:25:e0:da:18:27:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=8ffdb98d252da60d35bd5db4ff9bf085fb3ca45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:0a:85:e1:c4:5e:ff:48:69:5e:26:76:f4:
c8:e8:01:fc:cc:67:e9:38:86:37:41:9e:26:50:6b:
0c:d2:eb:30:8e:5b:3d:4b:97:5f:b5:50:62:2b:35:
18:05:ff:be:69:6a:d0:09:40:17:fc:dd:c1:f3:d2:
92:b4:d7:ef:1b:93:8b:b7:6e:8d:fc:d6:34:55:ce:
5f:69:e4:b6:99:76:aa:31:3e:b7:a2:63:32:eb:bb:
e9:bd:06:a5:ef:77:75:98:50:e9:50:39:9a:0d:8e:
2d:44:93:74:00:5d:92:7f:51:ba:f4:1a:c0:28:1d:
c2:bc:93:a4:94:3b:ea:ed:b6:db:c2:ba:46:e2:8b:
37:18:1a:eb:28:36:4b:10:28:89:d7:75:e5:f8:08:
56:9b:be:fa:c4:b5:93:46:6a:2d:aa:83:3f:8c:7f:
5a:ed:70:d8:d7:83:65:eb:37:6e:af:36:ef:92:1e:
45:42:ac:42:6b:36:38:0f:23:0e:3c:49:19:39:99:
9d:8c:ba:b8:21:23:50:a5:5c:03:bf:b3:3b:8b:a6:
c8:64:e3:65:bd:f9:80:ca:2b:db:c0:5c:2e:45:37:
7d:81:11:a5:12:29:82:4b:d5:e1:fe:43:8f:56:9e:
b4:3c:8e:b9:30:c0:d0:9d:bf:91:c5:7e:7b:6c:f7:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:B9:8D:25:2D:A6:0D:35:BD:5D:B4:FF:9B:F0:85:FB:3C:A4:5C
X509v3 Authority Key Identifier:
keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a7:8f:55:77:94:00:cd:0c:27:c4:d2:59:8d:17:82:6c:e4:
63:5d:03:65:e7:16:92:95:b1:72:c2:b9:04:a0:df:b5:80:49:
3e:b8:2c:f8:99:6c:19:ba:a7:6c:88:ef:6b:2b:be:15:09:84:
84:bb:82:a3:c0:43:af:29:cf:63:70:7d:41:7a:2d:e7:e1:23:
30:3c:bc:89:47:fc:c7:f0:69:6e:1c:a6:ad:48:af:e0:86:79:
af:1b:69:99:17:71:5b:fa:7d:0a:43:ea:72:d6:52:b8:60:c3:
5a:6e:eb:d9:5b:ba:bf:3d:3a:e8:ad:cd:0c:96:f9:df:48:59:
12:42:4f:3c:e1:b8:ee:10:16:32:b9:48:92:67:a6:16:7b:b5:
54:88:f1:e7:65:12:01:97:e0:e7:17:42:3f:e4:9f:f2:78:0f:
6c:96:1c:f1:aa:cc:c1:32:f6:80:a7:54:4e:54:d2:b1:10:18:
e7:17:cc:43:ed:75:a4:32:41:46:3a:8e:49:4e:ea:80:0f:4c:
12:af:01:79:95:78:c2:b6:74:9f:11:2d:ee:cb:a6:d9:94:38:
7c:1c:b4:2f:fc:c5:9e:d7:98:32:5c:23:f2:f7:56:18:63:58:
95:99:c0:d8:ce:a4:c2:53:b3:96:9c:6a:b6:7d:a2:c4:83:d5:
84:56:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:31 2025 by rpki-client