Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier: kT6tdDQJwv0jWDl99moCS0kwn02BX6DJzeLsn+TElGo=
Subject key identifier: 13:61:FC:89:9C:4C:93:38:69:A5:9C:2F:DE:AF:7F:8D:4A:A6:9F:A8
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 0194BC728E2D8C194723EE2AE2CE3787D528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: wlaRCBTsegkhKA5Qv8xxdaRV5e0MzHYXk+D3pxBi44w=)
2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:2d:8c:19:47:23:ee:2a:e2:ce:37:87:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=1361fc899c4c933869a59c2fdeaf7f8d4aa69fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:c0:6b:15:0b:77:37:3d:b4:b8:9e:1d:7c:
91:94:bb:33:9b:c2:d6:b6:03:91:a4:79:b7:7a:95:
63:d1:1a:5e:84:83:c5:aa:47:3e:98:a6:a1:c3:33:
65:48:ec:9c:ee:db:3d:8e:71:20:a2:bf:f0:c6:2f:
67:29:bd:3d:84:44:a9:44:43:9c:95:e1:70:7f:06:
35:32:2d:52:a0:c5:71:d0:be:cb:bb:f3:a6:57:a5:
04:9f:d5:94:4b:95:52:91:92:be:70:dc:d4:2c:9a:
a5:e1:ea:fe:53:88:29:9f:c5:10:02:11:0b:e6:70:
f7:22:45:aa:97:04:eb:ad:6e:3a:82:dc:f9:ef:82:
20:aa:90:40:7b:d1:14:fc:f6:16:19:47:ba:cc:27:
e5:9a:c9:d9:57:31:5e:b5:ad:e7:b5:70:48:c2:7c:
4e:17:02:50:ba:50:76:ea:cc:50:59:d9:55:34:e5:
0d:a8:5e:1c:a8:5e:25:ba:f8:e9:fb:8f:1e:6e:4b:
4c:c2:9c:6d:36:01:59:d6:52:2e:d4:c1:aa:69:30:
1a:50:70:75:c0:93:0d:6d:bf:a2:91:17:3f:78:82:
34:26:ba:f6:9f:94:eb:99:f0:2b:67:8d:80:3b:6e:
81:71:67:f2:ed:46:a5:cd:86:f7:24:3e:7e:0b:d6:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:FC:89:9C:4C:93:38:69:A5:9C:2F:DE:AF:7F:8D:4A:A6:9F:A8
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c1:2d:4c:7f:5a:1a:8a:4b:df:d6:17:5c:64:4a:0b:bd:b1:
77:00:38:7e:e9:00:5a:76:a2:05:3a:ab:61:62:45:ee:87:5d:
e4:6a:5f:13:72:be:20:30:ca:7c:34:2c:20:c6:77:d4:18:06:
21:be:f9:47:e1:eb:80:dc:53:86:6f:d8:da:4e:2f:e7:cb:6f:
ab:8a:d6:1b:2d:13:09:75:9a:81:02:1d:29:55:9a:c6:46:21:
64:69:ae:12:55:5a:e6:91:92:2c:5a:da:65:8b:5d:52:d6:56:
89:be:52:b9:63:e9:b8:47:b8:21:3d:93:60:6a:3a:58:3b:bc:
b2:a6:e9:84:b9:88:97:e5:df:7c:11:13:07:91:5b:dd:a0:0f:
48:9d:88:fd:99:6c:30:db:a9:07:15:13:4b:9e:98:32:6f:e3:
32:5a:bf:d5:61:f4:fa:dd:0c:ae:fd:f8:52:ac:70:ab:0e:51:
ce:bd:35:59:9d:30:6a:43:28:14:0a:9f:42:4f:79:6f:08:b8:
e1:1d:f3:8e:09:42:68:c7:47:e8:cf:88:e2:73:f4:88:e0:20:
cf:e8:c1:6b:02:49:18:ca:d4:7e:c7:f0:5a:55:af:53:da:ba:
19:08:50:fd:78:c4:d8:cf:a5:51:7a:5d:83:bd:f9:74:45:18:
ce:d4:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:13 2025 by rpki-client