Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier: 9UIUs6WvgikXwVmf1uAB5dLn4ZtJIJzarbJaW5TMzpw=
Subject key identifier: 65:DD:25:05:FE:1B:8D:0E:F4:E6:82:76:B4:57:0F:77:E4:B7:C8:14
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial: 0194BC3C44BA4787975F59A7268212444D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: tG+CTqbhqlwFA/PB7S9gckrgjo1LzDMlJnIgiAuDB6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:44:ba:47:87:97:5f:59:a7:26:82:12:44:4d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=65dd2505fe1b8d0ef4e68276b4570f77e4b7c814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:98:57:52:44:60:8a:5d:54:06:b0:75:ca:
17:17:ed:68:bf:78:6e:1f:e0:27:68:57:12:d3:19:
42:b7:36:46:37:82:17:5c:8e:b1:89:d4:69:90:57:
30:f3:80:8e:78:6c:92:f6:a2:65:3f:b7:bb:f6:64:
78:b6:c4:88:8f:1d:43:7e:69:97:6c:d3:7e:7d:41:
aa:9c:0c:a8:07:3a:cd:b2:96:30:2b:40:9d:19:e2:
a6:02:9e:28:f7:20:23:ec:b4:cf:c2:63:33:ed:16:
37:6f:23:00:7e:4f:ca:80:24:3c:cb:46:c2:76:ed:
3c:46:b1:8e:62:33:0d:b1:3c:5d:f9:ac:55:12:14:
b9:dc:46:70:4e:66:a2:a7:00:e8:10:e3:95:c0:53:
ab:c5:3f:3a:68:73:b7:99:58:b2:8c:a0:f9:0e:55:
91:97:a2:9f:5c:12:3f:91:1b:b5:b5:e6:75:fc:eb:
29:fa:d6:ae:d0:0c:38:c8:93:34:fe:66:39:39:76:
21:33:c5:fb:06:9a:e3:3b:a3:28:a8:58:c2:0e:42:
2d:ac:39:98:c2:3c:f4:28:0e:43:fa:87:4e:ac:d0:
88:de:45:18:b5:18:51:74:c4:b2:87:13:b8:e5:b4:
c2:e7:ad:a7:ff:82:8e:20:13:a7:9f:62:db:aa:01:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:25:05:FE:1B:8D:0E:F4:E6:82:76:B4:57:0F:77:E4:B7:C8:14
X509v3 Authority Key Identifier:
keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:27:20:06:bc:0f:f6:d5:0f:76:2b:9e:63:3a:eb:1c:cd:
a6:7b:db:21:0c:50:65:d7:db:7b:54:db:3e:32:49:d5:be:50:
b6:a9:30:7f:98:68:26:fa:cf:84:30:5f:4a:34:38:a4:8d:c0:
62:b8:38:7e:65:03:8f:03:7f:67:b8:d0:92:c1:67:d6:c5:5c:
25:65:fd:da:8a:d8:da:20:17:ca:14:99:4a:5a:06:e7:a8:d2:
15:64:f6:f2:c6:61:a3:8e:bb:bc:06:d9:97:9b:5b:39:4c:49:
1a:67:f2:be:eb:a6:36:52:4b:8f:25:8f:2f:da:42:2a:9c:8d:
56:55:28:2c:f6:aa:ef:85:aa:4c:1f:97:15:3e:76:e0:31:d3:
1f:87:2c:75:76:16:65:c9:fd:22:07:f0:7d:60:ce:db:59:c8:
9b:50:53:66:5a:57:e4:12:8d:87:79:fe:fa:88:02:f0:a1:e1:
d5:17:06:b8:6c:a6:75:5b:48:4f:b8:54:49:e3:60:c9:e3:96:
f5:1f:31:86:73:b9:0c:fb:6a:fd:ad:7b:7a:14:c8:c3:ad:e7:
25:c4:7c:09:10:c7:91:d5:79:72:d0:67:0d:0b:84:62:b8:df:
37:90:da:5d:87:d9:32:2a:81:2b:41:2b:4b:48:ce:2f:c4:85:
be:b5:a5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:28 2025 by rpki-client