Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: 1B8L6fXL/M/cUlxDPiUEonMYegxJgcqOdcaMhRkdYF0=
Subject key identifier: 5D:E3:D2:83:CC:F7:BD:3E:6A:BA:84:06:B8:E8:48:F3:E5:6F:E2:ED
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 0194BC04D422F021227A53F4BB62A723DA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 87KIy0wx9APHgKProb7Jm+PyNf7o/ridsM6ZRyMmFLM=)
2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:22:f0:21:22:7a:53:f4:bb:62:a7:23:da:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=5de3d283ccf7bd3e6aba8406b8e848f3e56fe2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:66:74:ad:a3:64:fd:b0:e1:f1:d5:49:ab:
db:da:25:13:38:32:b5:9a:2e:9a:cc:32:08:4d:9e:
78:89:1c:50:e9:5a:45:b3:31:93:d7:e6:05:b6:f3:
26:af:9c:3b:72:0c:9e:2f:92:1c:5b:2d:95:0b:16:
10:41:46:62:30:c7:b5:f1:32:64:86:f2:3d:d2:91:
75:32:fd:b5:32:07:f9:f9:9a:22:64:9b:6d:d0:76:
19:ab:b7:ad:e6:43:e6:39:92:ab:da:1e:6c:5e:73:
ec:b0:60:59:1f:41:c3:43:6f:57:0f:e1:4b:d3:21:
e2:e9:61:fa:bd:4a:28:3d:0f:12:8f:e7:a2:fd:49:
2a:fa:33:44:06:a3:63:63:6a:6e:d2:55:da:90:45:
7a:dc:86:01:3e:25:ef:90:c4:7d:f2:0b:93:6e:89:
86:fa:14:14:f5:e9:3b:19:20:be:cd:7e:05:47:66:
4e:f6:ef:1a:11:8c:38:23:f8:fd:61:15:0a:aa:48:
75:7a:a0:5e:45:e3:a6:17:c8:c1:79:52:97:62:ac:
21:e5:f0:ee:4e:5a:d9:73:63:25:48:6b:aa:44:83:
01:3d:2d:e7:c6:12:4a:ae:8b:f4:6b:9a:82:ce:c0:
9d:df:52:22:f1:6a:66:de:51:57:bb:4e:d1:73:85:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E3:D2:83:CC:F7:BD:3E:6A:BA:84:06:B8:E8:48:F3:E5:6F:E2:ED
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4f:16:87:34:fe:41:ec:4b:c9:67:ae:6d:e2:c9:39:66:ab:
48:32:71:20:22:73:43:2d:50:93:17:36:5c:e9:13:0d:cb:65:
7a:c5:92:b5:4d:40:9b:28:be:61:fc:1d:a6:ae:e2:1c:b8:66:
d2:1c:22:dd:ab:34:82:b9:8e:70:0c:20:27:cb:7f:73:e0:b6:
1e:4d:48:8c:bb:be:f9:f6:b9:3a:54:31:ba:86:32:9a:f9:6b:
ba:8f:f4:fb:4f:2c:8e:ad:6d:3b:9a:c9:ad:62:42:fe:3f:cb:
2b:fb:bb:6b:b4:db:e9:99:77:9b:38:f2:0b:02:37:34:f4:5d:
1d:d3:c9:9b:18:33:67:28:a0:e5:65:50:58:f2:fd:c6:b8:99:
c2:b9:1c:1a:68:82:b2:f7:35:c3:18:6e:da:fe:b4:e0:00:be:
9f:45:6e:75:21:05:85:ac:09:63:15:b7:8b:4f:a9:6b:23:4a:
2b:2e:1d:27:28:82:7e:3f:32:7f:59:b8:14:61:b6:db:f4:38:
20:de:ed:44:2e:a5:cc:c8:c2:41:e7:45:75:d0:71:4f:5f:f7:
8f:90:39:2a:84:04:45:f1:e1:fd:20:4c:52:69:c1:8a:20:64:
8e:2a:07:db:c6:51:d8:0e:f6:57:ed:bb:d3:57:f7:40:bc:ea:
dd:87:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:13 2025 by rpki-client