
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: eLFVjNmaObWvsM7G44NlvD7ro5tDBb2NOdAwcewYAFA=
Subject key identifier: EB:BF:55:19:8C:84:11:70:AA:77:C2:D4:C2:3A:9F:DA:70:85:2F:BB
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 0194BC728178D58F09FF4834BB8B0FC9504C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 0116
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: cW+7Hvv/HY7puneTj9KDoJOX+SzvnOi5NxO7XEghUBY=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:81:78:d5:8f:09:ff:48:34:bb:8b:0f:c9:50:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=ebbf55198c841170aa77c2d4c23a9fda70852fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:af:8e:ef:cf:14:c6:85:3e:05:88:b3:76:
88:84:19:49:38:a4:9c:50:0a:1a:88:c2:82:98:19:
fc:5a:1d:f5:fe:b9:ca:c1:09:dd:a4:9a:aa:c3:43:
61:b7:48:4c:a0:94:f8:a1:27:ee:40:79:c5:ac:20:
85:de:c7:ae:ed:66:1a:02:19:0d:2c:11:be:89:8a:
13:21:76:a9:90:2c:e5:55:9a:5f:4e:ff:36:b4:3a:
9c:7f:42:bc:28:03:39:38:e1:fc:6f:8b:b3:a0:c1:
4a:1e:2b:6c:7b:fb:34:42:57:5e:ca:d9:74:df:73:
7c:0d:53:53:ea:48:44:04:a4:05:6e:93:02:5e:f8:
8a:ea:94:ef:89:62:a0:2e:3a:92:bd:b0:da:c2:08:
66:1d:ec:31:8f:d2:a6:20:6f:cd:12:a9:2a:35:f1:
9f:2c:bc:cd:33:5d:c3:86:74:37:43:c3:92:42:1f:
4b:5b:9f:f6:bb:67:ef:bf:d2:b5:17:bd:4b:4e:8e:
2b:c2:c5:cf:45:2e:e3:03:dc:fb:c8:b0:08:92:44:
12:bb:af:af:4d:72:4c:6f:9b:dd:99:75:1d:85:61:
53:21:ee:3c:6a:81:5c:f5:19:dd:14:64:84:3d:ab:
dc:32:24:44:dd:f7:d9:e8:cc:0d:45:58:7c:a2:fb:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:55:19:8C:84:11:70:AA:77:C2:D4:C2:3A:9F:DA:70:85:2F:BB
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:85:f8:11:a2:e3:c4:4c:24:39:eb:47:b6:1a:ec:c7:7e:0b:
24:98:da:37:df:f6:1e:79:99:9c:60:d7:1c:5b:d7:d3:71:42:
da:bf:ec:78:37:b9:19:0c:98:b4:22:a7:ce:ba:ab:2f:d2:58:
c2:86:1f:09:ca:6f:db:ba:f9:8c:b2:ec:9a:22:b8:70:f4:0c:
31:bb:0e:79:bf:54:db:3b:37:37:0e:7d:5b:17:da:12:e2:6d:
e3:b7:ad:6c:f2:76:f1:1d:37:5d:78:be:a0:f6:8e:98:94:f9:
4d:71:6f:af:05:33:6d:6f:9a:be:ab:39:d2:96:a5:72:38:aa:
8d:89:de:8b:60:7f:6e:d7:c0:11:bf:ed:5e:5d:be:5d:5a:6e:
13:e0:12:ea:a6:6a:c2:b4:11:85:07:ca:c4:84:dd:81:c6:d5:
86:63:5f:68:35:d6:a5:fc:9c:cb:a1:34:b2:1f:80:74:b5:e4:
a8:6c:24:74:ac:70:0f:e2:ba:48:73:19:a1:9c:2e:73:b6:2d:
81:db:8d:2f:24:e6:8f:76:0b:45:43:d4:2d:ac:5c:4d:2e:1b:
17:7d:19:19:de:1b:9e:70:66:b0:78:82:d6:20:5b:72:87:e1:
34:aa:6c:4a:f2:a3:99:63:ff:0b:ef:3d:11:a3:6b:59:1b:ec:
c0:92:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:01 2025 by rpki-client