Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: vBAgpd9h//5bLUV/CKjHIIYlUe3yeglRQvvAxmsYufU=
Subject key identifier: 1C:39:41:79:1B:8D:24:C6:1A:75:46:FA:AC:40:59:19:54:C2:D6:12
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 0194BD179DE49E97D23328E4CBBDD07BBA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 014C
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: khzYoM6pAyp6a91ZQXpXXmIaINHsL4b8ko7+LF1uFyQ=)
2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:e4:9e:97:d2:33:28:e4:cb:bd:d0:7b:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=1c3941791b8d24c61a7546faac40591954c2d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e6:2c:d7:f0:f6:dc:23:b9:e9:1b:cb:f5:c8:
1b:5e:5e:22:f9:c3:17:3e:a0:ad:58:7a:f0:88:f3:
c8:07:47:03:28:be:24:2b:7d:98:6c:7a:fb:d7:46:
29:ce:7e:83:e7:e5:8c:c9:10:6e:7a:32:ed:07:bb:
5d:0d:f5:4a:86:2d:fb:9e:e4:05:09:0a:3a:6b:eb:
1e:91:6f:41:f5:50:fb:7e:68:10:f9:76:48:da:8c:
91:26:d1:f2:1d:36:22:b6:50:24:83:7a:bb:13:2c:
69:69:c2:4f:3e:09:5e:0d:97:d5:02:42:e6:11:28:
8d:77:8e:8f:a5:e0:e5:81:4f:c2:b2:bc:05:96:bd:
d7:32:15:e4:4f:ca:cb:77:af:27:5f:5c:89:6d:65:
98:0d:11:54:ba:d9:ae:6a:2c:54:15:dc:ae:b6:4d:
05:f2:b9:97:7c:ac:12:15:36:3a:72:a9:43:4f:cc:
a8:90:35:34:a8:c2:c8:a2:13:23:80:fa:51:75:bb:
86:b8:75:fa:5c:b2:a5:b5:88:ad:2c:c9:df:c4:2a:
c2:65:12:62:5a:5c:58:26:24:3c:c0:22:60:8b:2c:
f2:48:2e:a4:25:a4:83:c5:c7:e9:75:a5:52:15:52:
ce:39:e6:31:9c:f0:c1:d4:d8:f8:9a:f9:a5:aa:76:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:41:79:1B:8D:24:C6:1A:75:46:FA:AC:40:59:19:54:C2:D6:12
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:19:9c:f0:af:4f:79:a3:15:81:9f:14:45:da:d3:06:fa:
77:27:b3:f5:2f:b4:e4:07:86:24:09:de:b9:d6:3e:73:fb:5e:
57:9f:f5:73:04:6e:c8:52:53:01:29:4c:5d:8a:1d:05:01:6c:
1f:c7:29:e7:cf:3f:80:06:3e:42:d8:b2:ff:9c:3e:07:76:11:
26:9e:c5:92:d5:c6:d8:48:97:19:93:d9:6e:a3:ff:4b:f7:36:
5c:b8:ae:3c:d5:6e:6f:58:92:ec:a6:c8:ed:ab:de:ac:30:46:
b9:f4:e7:37:c1:ce:c6:12:d7:d6:48:df:a6:3a:65:9f:89:d2:
89:99:c3:d4:92:0f:43:43:75:35:8c:36:0b:3a:f0:24:98:33:
20:06:e8:bb:aa:8f:89:d0:af:56:67:b9:58:f0:53:f7:a5:19:
88:19:3a:a8:97:d6:bd:2c:65:30:c6:24:3a:72:45:b3:1c:f6:
9d:8e:35:2c:df:45:c4:ff:5c:58:39:37:72:64:68:1d:21:32:
6a:7e:cf:89:df:fc:54:d3:c8:3e:b8:96:5c:c0:5a:22:39:97:
3c:cc:f5:9c:94:d7:ef:9c:3e:c8:e2:37:af:10:bd:bc:53:f6:
98:22:af:b3:4b:bb:f2:ca:24:0e:5c:93:21:df:37:4d:57:1b:
65:0e:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client