Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: OMqxaagixs2kqkw2aIkucRiAk4InlpKwqeIbuTRuqRw=
Subject key identifier: 66:D2:B2:06:47:C3:6C:69:E3:64:AB:39:41:71:8B:5B:03:18:92:73
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 0194BCE0E09DE91C38A580B389A320EF9900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0E1A
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: TigOypZV+0ZCbfbEPgxsuyU3udxcMIJqYP+fYh8Jgfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:9d:e9:1c:38:a5:80:b3:89:a3:20:ef:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=66d2b20647c36c69e364ab3941718b5b03189273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:4c:6e:d8:0e:96:be:3b:a2:e4:45:53:4f:
8a:22:83:06:ea:5b:cf:d9:af:be:c9:5e:4b:d1:de:
61:c9:0a:3b:79:77:08:78:6e:e5:1d:8b:4e:66:2f:
2a:a7:65:39:e8:44:26:5f:e8:e5:90:a7:66:2c:b8:
2d:c7:94:ca:76:53:3b:a3:dc:99:72:18:0a:89:e3:
53:95:03:48:be:23:08:5c:45:8b:5b:24:90:13:40:
b0:38:25:1d:21:2e:7b:c5:f2:6d:4f:6b:02:c8:7d:
7b:33:6e:38:e0:0a:ff:a7:06:ff:7c:a6:3c:f3:73:
c9:ad:37:9e:17:6f:ad:38:c3:d7:4b:5d:5a:ab:42:
c3:05:57:32:b7:89:6e:50:8b:ca:9b:8d:af:d2:0d:
28:32:50:24:0e:82:2f:9e:cf:52:b4:e8:72:03:51:
a9:9a:db:08:cc:3b:e8:6b:f4:06:9a:4f:0d:a3:c5:
c2:cb:a0:72:0b:ac:61:67:c1:c9:3b:f1:12:f2:cb:
dd:6a:c6:82:f6:6b:d8:a1:3f:88:2b:c9:bf:d2:4d:
f3:4b:1c:47:a7:a4:aa:b4:e1:ec:b9:ce:15:2d:ca:
30:13:cb:d2:91:72:ee:8d:15:6b:3a:0a:ba:a5:94:
a8:ea:3f:e5:fd:90:cc:56:a9:ee:19:c0:59:07:24:
fd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:B2:06:47:C3:6C:69:E3:64:AB:39:41:71:8B:5B:03:18:92:73
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:09:b0:ea:8c:ba:2b:ec:b0:56:08:c7:25:98:f4:9f:28:68:
51:fc:83:6e:a3:55:cf:06:50:03:70:09:0c:8e:51:ca:db:a0:
07:e1:d0:1e:00:03:0e:42:dd:93:56:a4:7f:be:ec:8b:4f:a1:
04:7d:f2:5a:21:94:38:a0:cc:a9:04:53:29:38:2d:d1:c9:87:
b6:92:9e:9b:24:6b:4e:da:a8:dd:a8:c8:2c:28:de:9f:f5:ff:
c7:18:5a:99:4e:1a:65:57:3a:a5:61:2a:d3:9e:04:99:aa:ab:
a3:8b:7d:83:3a:9e:cc:43:9c:f1:d2:1b:1e:39:97:6e:22:51:
9a:8c:3d:81:b2:ef:75:f3:2e:7b:5a:c4:2c:d2:72:d0:54:56:
12:5b:e7:df:49:46:06:7b:ba:b6:c5:98:9a:5c:eb:59:45:e2:
a7:5b:e6:44:51:a6:17:97:f1:db:93:ec:7f:8b:a1:64:cb:e9:
66:e0:3f:4a:be:2e:80:ff:69:9e:e0:1e:e9:ca:28:87:80:1c:
40:93:ee:e8:08:9a:79:85:2f:31:b0:87:42:a5:e9:33:7b:98:
7d:65:14:0f:50:17:b4:cf:77:5a:58:00:e3:8e:09:c6:67:65:
48:1b:c7:f9:e6:31:36:67:82:91:fc:84:29:1b:05:a0:41:06:
e2:d5:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:11 2025 by rpki-client