Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
File: adeHWeDsbxRWbRC4PIPyvxmbcQA.mft (raw, json)
Hash identifier: R0ZrfB8N8u+vkJFvVf6V/iDhBfmsskkru5cR588i29k=
Subject key identifier: 54:CE:E6:0C:7A:13:06:82:7A:78:79:C3:F0:E4:81:52:39:2F:77:93
Authority key identifier: 69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00
Certificate issuer: /CN=69d78759e0ec6f14566d10b83c83f2bf199b7100
Certificate serial: 0194BD4E8F8FE7AE2CC66A6AC06BD63B1530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: adeHWeDsbxRWbRC4PIPyvxmbcQA.crl (hash: qun3fuTCG10cySyARcHSOixr9wD0ecxFoMWwpD1Bmy0=)
2: nVf4_JDF5Jd9blmd8M4doxhRW2o.roa (hash: fALm6gvriMfPKqnoL8NdKDlRyE7vGyHBMNh6mS8vfwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:8f:e7:ae:2c:c6:6a:6a:c0:6b:d6:3b:15:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d78759e0ec6f14566d10b83c83f2bf199b7100
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=54cee60c7a1306827a7879c3f0e48152392f7793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:70:f1:21:98:07:eb:1c:3e:f6:ca:b1:a2:
ce:3d:51:86:d0:f8:95:e9:dd:1c:51:97:5d:3b:70:
e0:45:57:17:1e:89:ab:a2:b5:9a:50:5c:94:e4:1f:
87:3a:ec:dd:19:e5:89:00:0e:48:9b:6d:36:f1:d7:
8b:b1:e9:7b:c6:b5:3f:17:fb:e4:d5:3c:13:3e:47:
d2:0f:d5:24:3d:fc:48:77:e9:e8:d4:97:76:58:8f:
56:df:d6:9e:e5:17:aa:21:6f:ff:be:7c:2b:80:ca:
15:05:d9:16:8d:ec:50:4d:cc:01:4d:c6:ce:57:e1:
1f:32:78:b9:e3:e2:c8:f6:11:80:9c:c1:e2:96:51:
d1:21:a2:f1:81:66:e5:6c:a9:a8:29:77:30:4f:68:
e7:e1:1a:73:1c:2c:c4:b2:1d:79:fa:5f:d4:85:50:
f3:86:fe:86:8b:8d:99:32:28:93:b4:96:28:6d:23:
5a:c1:94:ea:f6:10:c1:0d:60:f5:da:19:7e:03:ba:
49:ee:12:1b:42:64:c9:53:55:dc:12:52:d4:50:53:
6d:ec:34:76:d1:98:bb:79:c4:40:18:d2:39:6f:f6:
0b:4b:60:3c:03:eb:06:12:0a:c7:08:6b:e7:13:5f:
72:21:4e:7b:48:78:b5:a7:2f:67:0f:d9:e2:5f:66:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:E6:0C:7A:13:06:82:7A:78:79:C3:F0:E4:81:52:39:2F:77:93
X509v3 Authority Key Identifier:
keyid:69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:90:89:55:52:40:10:db:22:ef:b4:2d:30:c3:01:da:7c:
5b:ff:8b:74:e2:2a:04:8f:ce:92:ab:4b:62:32:56:70:f8:5c:
82:98:f7:1d:22:aa:94:83:32:e4:26:d0:a6:05:de:53:b8:a5:
16:3f:30:b7:4d:58:ea:33:99:51:bc:fc:e3:78:93:63:fe:0b:
b0:53:f5:6f:09:31:8e:f0:c0:aa:56:17:4a:27:bb:f4:96:0b:
28:ea:01:7e:3c:f6:31:5d:7b:ed:90:25:f1:35:b3:92:fb:ac:
b2:e4:0f:78:e6:42:e6:da:6a:24:e9:98:d4:a7:c2:6b:c8:ba:
ea:96:27:3a:0e:ce:11:c0:f1:0c:c5:08:8a:3d:6f:2e:15:c0:
08:16:3c:eb:90:9d:85:f9:e0:cc:50:cf:50:8d:15:9a:50:eb:
3b:d1:fc:b0:41:56:bc:65:51:54:09:87:0e:2d:c1:f0:8a:7d:
a3:42:c2:b9:ad:7f:c2:99:ed:fe:c4:83:a1:7c:74:10:24:a8:
fc:e1:7a:7d:c1:d3:82:0b:8d:a2:af:67:42:41:c0:68:34:c3:
ac:af:5f:e2:97:43:d5:6b:5a:00:c3:49:0d:64:ae:c1:65:53:
d6:66:de:5f:70:ed:07:2a:71:34:8e:b0:9d:3b:bd:b0:3f:8c:
ef:46:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:43 2025 by rpki-client