Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File: E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier: 6yaN3WmgkNvkzVPGA2j7SA7bEwlS+5gaoJjnIjJ79Y4=
Subject key identifier: 4B:8B:EB:9A:B3:1E:29:74:5E:82:03:3F:12:42:3B:E4:DD:64:A9:DB
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer: /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial: 0194BBCDEEED6F8FA4B3071B1329BB771C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number: 0D93
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: HkGz6NbWLoi9aR8jsqyn+z1MleWqqU258+GdMLt2GRI=)
2: o33nzDd8Ud4SHUROSKPBqYvsK3I.roa (hash: 0uR5NTZUtirBbDZZiV+z6XYeVClsGx8GOL6f3pU8rh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:ed:6f:8f:a4:b3:07:1b:13:29:bb:77:1c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=4b8beb9ab31e29745e82033f12423be4dd64a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:2a:2d:73:ef:34:bb:ea:db:71:4a:13:95:
0c:0d:dd:7c:9b:24:74:0a:73:ee:38:9a:1c:8c:89:
fb:29:6f:b4:e0:14:37:9a:c0:8b:47:fb:28:62:83:
ba:af:fb:ca:57:9d:2f:24:04:b2:d5:ce:d3:d0:8f:
3f:f3:6e:46:ab:76:db:22:47:df:14:5b:58:86:08:
2e:68:b5:7d:a2:1d:3d:fe:79:73:dd:c1:46:40:e2:
e2:5b:51:f3:31:11:cb:05:a4:7d:f7:61:27:21:0e:
ec:2e:ea:ac:47:d3:93:a0:1e:0f:6d:e4:b5:06:07:
18:95:1d:14:34:41:a0:b4:93:57:f2:d9:54:08:59:
c9:c9:cb:13:22:35:72:a7:eb:b3:cf:33:62:7f:6a:
6f:e3:05:39:d5:18:f8:76:a7:08:c5:a0:2f:cb:d4:
4a:e4:de:87:4d:bd:95:1c:f0:f3:8e:ad:bc:50:29:
dc:93:52:2e:25:3b:0e:0d:da:ea:99:dc:94:61:ad:
d0:f2:c6:24:e5:c4:f6:aa:b9:ea:d9:f8:21:11:ef:
a3:63:b0:45:20:3a:2e:54:9d:33:7d:68:ca:f5:04:
9e:21:f6:f6:31:07:a6:6b:8a:89:26:04:10:bd:a5:
8c:f0:d5:7f:3e:3c:5d:43:d0:e5:01:b6:a8:f3:36:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:EB:9A:B3:1E:29:74:5E:82:03:3F:12:42:3B:E4:DD:64:A9:DB
X509v3 Authority Key Identifier:
keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:81:0e:66:dc:d7:43:e4:45:d2:21:b2:84:12:bd:18:9c:f7:
ec:4a:ac:a5:62:a6:13:ef:8d:04:ba:ad:eb:4d:3e:b4:c0:5e:
2f:42:55:7c:34:18:54:e1:7e:7d:c2:cc:34:3c:37:da:62:59:
75:18:f2:e2:03:0f:84:d5:39:be:fe:22:c7:d5:d0:9c:32:8e:
5b:49:31:64:03:e6:4b:c0:16:d8:82:fc:2f:ee:ad:8f:ec:46:
64:93:48:39:8b:e3:a7:ee:88:4f:60:a4:fc:4a:9b:1e:4f:03:
a7:99:a4:4a:5f:31:20:1d:4b:fa:55:65:ab:a9:5b:26:0a:27:
39:92:8d:2c:98:ce:e1:a6:60:63:35:fd:5b:51:be:0f:40:d3:
ee:4c:df:0b:c1:8e:3e:3e:cf:68:b3:a1:2c:6e:37:d8:15:a1:
54:2a:a4:1a:a8:de:a7:f0:47:7c:ee:c3:b8:a3:73:9e:4e:23:
9a:f7:d6:88:76:82:f6:c7:bd:be:37:78:ed:b9:d8:94:10:6a:
83:ef:e1:5a:ed:83:0c:b8:ea:b9:c6:e1:61:53:d0:94:40:b1:
33:1c:7d:d1:95:bd:4e:1a:b2:62:8f:6a:02:46:f8:51:95:c5:
9b:92:0a:9d:7b:0e:80:d1:1b:65:6b:2f:ca:2b:86:50:32:3f:
13:31:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:59 2025 by rpki-client