Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: 5q/PHGLrd5yzbXVRTdNLO4n9D5kFgLuHmDJayCqG0QI=
Subject key identifier: 75:B5:5F:93:E4:87:9D:E3:31:39:39:A0:9A:D8:63:EF:09:A9:7C:11
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 0194BCA9DAB7FECF6A7F96FB64A9176C4C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: F2
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: ywWgska3dkYhJVJBwKYhQo0bymg51lABZvMX1BQZxDk=)
2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:b7:fe:cf:6a:7f:96:fb:64:a9:17:6c:4c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=75b55f93e4879de3313939a09ad863ef09a97c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:bf:ad:b4:e0:59:55:47:d6:2c:6a:fc:6c:
1c:e3:d7:3a:f4:25:51:f8:9f:f7:44:68:23:bd:59:
fe:2d:89:61:50:17:a4:ac:73:a0:ed:57:0d:09:45:
88:52:40:6e:03:91:85:99:ec:de:52:71:9b:65:b8:
7d:53:5c:02:cd:6d:ea:4c:10:01:f5:6c:04:3b:7b:
92:b0:14:3f:db:47:37:b9:74:9c:e5:a8:01:73:26:
61:98:93:37:28:6e:dd:35:87:f1:24:d9:87:25:8e:
a4:a2:b0:3f:23:3f:d0:6c:a1:13:0d:ca:81:20:d5:
21:5f:47:d6:a1:29:15:ab:d8:25:9b:c5:19:07:fd:
5e:b2:6d:86:cc:80:a8:3b:4a:43:0d:41:d8:9d:e8:
f7:31:2b:28:0f:ad:03:10:a8:f8:39:3e:2c:56:c4:
71:f9:04:f4:cb:f7:c7:98:2f:42:db:d4:d3:85:8b:
c7:ea:e7:bf:0e:9b:f6:ca:ae:df:0d:5f:fa:1c:51:
1d:f7:58:0c:4e:23:bb:4f:2a:84:5d:4e:08:b9:e9:
51:5e:9a:23:56:f5:76:00:da:b7:b9:89:cc:8f:4a:
bc:9c:bf:3e:6a:f4:f3:71:03:56:f9:21:09:5c:65:
e8:9a:1f:ea:b8:53:c6:5f:9a:13:23:69:fb:df:86:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:5F:93:E4:87:9D:E3:31:39:39:A0:9A:D8:63:EF:09:A9:7C:11
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7b:79:69:de:e0:04:c6:df:92:4a:38:dc:1d:86:a2:b4:b1:
ed:6f:bf:7b:26:20:66:8a:0f:e9:1e:eb:5c:46:25:7d:72:f8:
bb:1f:08:92:46:00:25:d4:1a:b0:7b:2e:63:f3:7c:4b:4b:b4:
b8:28:19:d6:cb:7a:18:64:f1:fb:c3:33:91:13:fc:f4:f0:ba:
8b:fb:5d:12:5d:f0:ef:e8:c2:42:ab:8a:f6:07:03:94:c8:ac:
a7:47:a1:c5:b7:d9:8f:56:d6:d6:38:5c:02:ad:ae:e4:c3:7f:
58:64:fe:0b:d6:3b:5f:b3:02:1e:89:93:9b:e5:59:f6:ce:2d:
7d:27:3b:87:c2:d4:d3:0e:8b:7c:9d:6f:3f:81:57:05:ac:ce:
5e:75:0b:b7:84:96:37:61:eb:d8:72:9d:bf:22:34:4c:e2:f9:
bf:f7:21:79:79:34:c3:b3:72:fb:79:d0:8a:cc:36:11:5e:be:
a7:be:71:9b:3a:0c:c9:c2:46:cd:65:99:f9:ad:de:7c:4a:b1:
06:18:88:13:a6:e8:78:25:d6:cf:ef:f2:ca:cb:4b:fe:26:40:
62:11:77:67:f1:af:df:7e:91:c7:ab:82:b1:7c:b2:c8:88:30:
db:b7:68:67:07:27:15:2d:35:39:e6:5f:e2:41:ec:5b:6e:1d:
de:8d:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client