Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: sgK40giW+P5/Vc+jSPCHzTVZaOZ6gbnV0kxxN9OTG7M=
Subject key identifier: EC:5B:66:F2:F3:F1:C5:E2:68:9E:5A:2A:DF:3E:58:5A:3B:0F:BE:DF
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 0194BBCF065E2B11E0E300F695C406910601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 02AB
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: ETqKRUlkui77kd37I9/V/0OT+dC3L/ikMEeunUmNErk=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:06:5e:2b:11:e0:e3:00:f6:95:c4:06:91:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=ec5b66f2f3f1c5e2689e5a2adf3e585a3b0fbedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:43:39:32:84:e5:63:19:01:65:9b:2e:00:
49:1d:bb:e1:09:51:98:10:52:a6:49:57:5e:af:5a:
b1:3b:e9:e4:87:a0:96:74:56:fa:fa:d2:42:fc:f8:
7f:ff:da:17:3d:a4:cf:29:e4:0b:cb:0f:21:8f:a5:
fa:4e:a5:c9:8a:ef:21:30:20:fe:09:5c:30:e8:03:
04:8f:aa:12:1d:00:e9:38:29:c7:ec:e9:b1:4b:ba:
04:08:76:2d:f8:23:82:3b:ae:29:83:14:41:bf:a6:
f9:12:d8:00:4f:65:27:9d:87:fd:06:6d:b2:fb:d5:
56:1f:7d:03:d5:e9:79:d6:13:7e:9e:14:68:c0:1c:
09:6f:2f:9c:71:77:40:78:d5:33:0c:f8:12:e5:f0:
2a:95:f1:91:bd:eb:52:dd:1f:dd:9f:d7:37:5e:36:
43:dc:18:b0:ba:17:e3:61:7a:79:4a:d8:60:d9:f9:
0c:79:9d:d3:25:f1:a6:3c:2a:3d:a1:6c:d7:f4:11:
97:e7:58:eb:71:ca:e6:6d:41:59:ed:de:17:db:9d:
b2:86:90:fb:0c:38:7c:b8:0a:8a:92:e8:1d:f1:e3:
93:df:59:9b:89:09:b7:11:16:0c:aa:2a:78:d0:43:
bd:61:b0:f8:d7:02:3b:39:bf:01:40:ff:6c:d0:5c:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5B:66:F2:F3:F1:C5:E2:68:9E:5A:2A:DF:3E:58:5A:3B:0F:BE:DF
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:95:07:f9:92:1e:b8:4c:7c:0f:37:64:ca:d6:d0:ca:6d:
54:85:62:c4:ec:08:9b:59:8a:e7:25:27:a6:e0:70:d2:7b:9b:
aa:49:23:5a:74:26:98:50:66:d8:29:9b:a7:33:19:f9:20:d3:
f4:61:6d:1e:02:65:d7:93:4d:3b:bf:06:b2:83:85:c4:94:14:
ea:1f:82:f3:5c:fa:07:72:4b:eb:89:a4:e3:1d:e2:97:66:f7:
dc:72:9b:70:e1:19:6d:9d:34:74:7c:41:d2:76:da:24:5f:92:
7a:15:be:00:ed:ad:4a:4f:39:b2:d6:86:08:60:fc:76:aa:df:
a8:35:ff:2b:6a:17:97:ce:d9:02:af:13:d2:30:fc:0f:5b:5d:
12:44:a1:a1:d5:91:5b:6c:ff:2b:c5:19:1c:26:7f:32:46:db:
be:87:03:9e:96:6c:fa:e9:ea:f7:81:af:8e:79:60:ed:49:d5:
83:51:e1:43:de:17:21:59:25:16:c6:19:1f:77:b3:d4:6c:e7:
01:8c:38:a6:28:1b:cb:e4:a6:d3:ba:33:9e:a1:eb:fb:c0:ad:
1e:dd:de:37:cb:d2:f8:e6:a0:b3:95:e9:75:0b:cf:5b:f1:d5:
36:4e:fd:61:e6:33:c4:fb:4b:cc:a9:fa:1d:77:b8:67:1c:83:
ea:ac:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:27 2025 by rpki-client