Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: LMKNg5kguDtMmIJ5SFLFizdRLVQF4TMAS+i+mGot7AI=
Subject key identifier: 36:E2:E2:6C:A5:70:FC:2E:7B:5E:4C:87:1D:18:2C:D7:6C:52:EE:69
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 0194BD85508C76362F60D7CC2F8E1AA8C51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 014C
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: goY3P5gSeS5jwAu/a9FFIaX7wHHwfrp88NXCSfLm6nY=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:8c:76:36:2f:60:d7:cc:2f:8e:1a:a8:c5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=36e2e26ca570fc2e7b5e4c871d182cd76c52ee69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:33:dc:b0:91:eb:5a:f5:02:20:39:86:e6:
c8:05:2d:5b:bf:f0:d4:b3:5e:69:f2:d3:5e:98:32:
f6:da:0f:3c:48:ea:67:3d:ea:1a:9c:88:13:8a:f9:
ed:ab:86:7a:30:a2:cd:6c:fe:6a:42:3d:80:e1:bf:
5a:f0:88:bd:b6:37:dd:41:ef:a0:01:56:a6:1a:1e:
fe:a7:b6:f0:ac:81:c6:ab:be:ce:cf:16:c7:d7:14:
3c:f1:70:7d:fa:74:6e:28:82:11:9a:9c:68:52:b3:
63:44:96:9e:c9:39:85:87:ee:8a:02:9d:86:b6:76:
74:87:9d:7e:03:a9:17:9f:dc:1f:ca:bf:2f:d7:e0:
c6:2c:bb:b6:a1:fa:02:4b:72:a7:b7:22:7c:5d:fa:
db:8f:47:69:dd:86:96:5a:8b:5b:99:4c:f4:12:e4:
d5:d6:2c:3e:94:98:e1:39:65:cd:d9:59:22:ef:2f:
7b:f5:37:ab:58:35:32:a3:74:c4:34:f6:cf:75:66:
a0:38:04:52:79:b0:a5:c3:6d:0d:27:23:35:c0:05:
9e:e3:f5:3e:b5:43:c7:54:a8:21:16:80:05:c8:00:
c2:b9:2b:35:d6:3f:a6:8e:c0:ad:a8:13:54:b9:c4:
e3:61:86:f0:34:2b:cd:ee:6c:cf:3e:83:40:48:97:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:E2:6C:A5:70:FC:2E:7B:5E:4C:87:1D:18:2C:D7:6C:52:EE:69
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:97:02:cb:dd:aa:a2:37:06:ad:2a:78:b9:27:e3:3f:58:
9c:31:f6:e6:66:99:21:ef:2f:9f:42:6a:fe:43:98:17:d4:b7:
8b:04:07:27:08:76:2d:90:c0:04:3e:8b:37:9d:99:de:16:78:
68:01:90:52:9d:d9:f6:16:72:3e:66:6a:f8:a2:be:35:7f:f5:
8b:f5:2d:9c:c8:59:b1:57:c5:de:d3:4b:25:c9:47:1e:ab:23:
7c:2c:2b:86:2a:0b:b3:46:fc:14:6a:44:6f:dd:c5:2c:65:56:
40:44:ae:c0:95:7b:d3:e1:3d:95:b8:a7:fc:09:d4:e9:b8:22:
ac:18:dd:8b:1f:72:a4:49:d2:27:a9:c8:be:0d:43:40:70:98:
20:68:36:7b:6b:d8:e6:39:bf:51:ab:69:c5:ea:9c:ae:82:5b:
7e:58:2e:52:94:3d:c1:78:84:8d:24:c3:8e:70:73:6a:0e:d0:
42:80:6d:fd:04:49:92:30:4d:ff:a1:71:33:58:4e:a2:34:60:
db:78:b0:fa:32:37:ea:08:52:8e:14:c2:fc:26:6c:7d:89:c3:
b4:af:38:39:b3:20:6a:bd:9b:14:49:c8:2a:ae:68:91:e0:5e:
7e:d2:24:ac:9b:15:0e:2b:89:fe:38:77:75:21:b9:63:63:47:
49:dc:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:20 2025 by rpki-client