Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: l8PtL90z7BgKfoi/IhqD4Goeu9VnXZLgIwhIhmXrTFI=
Subject key identifier: FB:21:CD:96:2D:FC:E9:26:2B:55:8B:6A:14:A6:B6:C3:86:7C:20:EB
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 0194BBCE0F00658A76582F74F0E16EF91691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: VD2nMbjn8GWKbzsdtICi+IQHHdahluAxPqadvIoq0Yw=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:00:65:8a:76:58:2f:74:f0:e1:6e:f9:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=fb21cd962dfce9262b558b6a14a6b6c3867c20eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:76:af:46:c5:ef:1d:f8:76:57:74:bd:6c:
5c:1e:7e:49:a3:26:10:4e:e4:d5:8f:7e:0c:aa:82:
75:48:59:19:83:80:37:34:cb:48:e1:2e:b4:99:85:
e3:5b:59:1d:7d:ff:33:b8:41:f2:49:d6:31:00:ef:
9e:f0:16:e6:86:6d:ae:b6:df:13:30:54:ef:da:57:
a5:16:d1:d0:9f:e0:2e:94:a7:c1:97:ac:a9:e3:f1:
0b:a1:8b:63:47:ff:9c:e0:52:d2:e6:9d:fb:3d:a7:
ae:fb:85:9e:ea:92:6a:85:a2:f8:54:d6:ef:6b:40:
e1:b7:11:f5:28:33:b7:c7:e4:9c:63:07:3d:93:fb:
95:1b:d0:84:44:86:c9:46:eb:ce:7c:e2:4f:c6:02:
ec:82:3c:f1:c3:00:57:27:ba:a1:0e:ba:5d:e7:d6:
96:93:35:8a:10:49:22:15:78:aa:9d:f0:13:6c:11:
da:2d:f7:8e:80:ee:6e:63:2b:fb:7f:3c:38:46:0e:
48:37:6e:f6:cc:cb:8c:ea:16:44:eb:2f:56:9f:cd:
66:9c:60:62:4c:f7:41:0c:55:88:47:7e:71:00:b8:
d2:73:09:74:69:0d:58:cc:71:3d:86:d8:cf:ea:30:
09:d0:ea:ad:07:a9:cb:5a:f8:b7:cf:a9:fa:ee:6f:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:21:CD:96:2D:FC:E9:26:2B:55:8B:6A:14:A6:B6:C3:86:7C:20:EB
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:87:86:e3:a1:c8:41:96:5c:88:d1:3c:e5:65:ba:90:da:64:
87:47:2b:03:a2:56:9e:45:08:0a:64:8b:05:97:b1:92:1f:6b:
97:11:7e:1c:4b:64:11:c0:1c:77:1a:a3:d3:b6:2e:95:f3:a8:
27:5a:36:d8:bf:aa:4e:5d:45:21:bc:26:9c:14:4c:73:a8:02:
b1:dc:9d:02:c0:36:f7:2f:94:9e:0d:6d:92:c3:b3:57:a3:3c:
5d:fa:1c:a6:cc:da:ae:57:68:81:e7:16:c2:32:40:75:40:8c:
f8:a4:d6:81:9c:c2:02:7a:8e:2a:ef:5a:db:66:a1:85:ef:4a:
5e:c0:b7:d0:af:3d:61:d6:41:94:1e:a2:73:8b:59:cf:46:bb:
ba:45:d4:2c:ba:4f:ac:b6:80:b3:0c:81:57:8e:ab:46:5c:d8:
38:3e:97:0e:fc:2c:e5:58:43:23:a8:37:a1:07:45:0a:88:cf:
a0:3c:3b:34:d7:47:fc:c2:32:4b:a9:0b:a7:57:c5:4e:65:ea:
54:14:77:44:fa:08:d7:cd:d5:7e:0a:06:7e:a9:1c:03:d3:db:
d1:e8:d6:af:75:62:22:7b:18:95:4f:77:1a:03:ac:b0:9a:e4:
56:59:71:82:fe:3d:3e:d8:23:70:c9:b6:f5:68:77:5e:e6:92:
8e:3c:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:15 2025 by rpki-client