Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: IKSL+f2E0HATE5waR5X7TDyCrFGiWAlE03rGApBZZy8=
Subject key identifier: 36:CF:F6:AF:88:48:ED:E6:ED:24:25:AF:B4:74:98:8D:AC:4E:2D:96
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 0194BD858ED4649CDFF6BFB9EEF444FC23C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: 30lJNOQUxYXlowcBcsfppHDGAPfnaB3/VEpKdFd26+A=)
2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:d4:64:9c:df:f6:bf:b9:ee:f4:44:fc:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=36cff6af8848ede6ed2425afb474988dac4e2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:68:a8:5d:98:64:f0:34:a1:1a:4c:2c:f0:
1e:2c:d0:a5:6a:98:ec:40:e3:d9:f4:bf:0d:51:15:
59:85:c1:45:81:80:02:d0:49:a5:66:2e:ad:b3:37:
90:51:24:85:63:53:8c:d6:e9:0b:3f:06:74:90:fc:
16:7a:e4:41:70:77:78:3c:7f:37:ca:2e:6b:ae:db:
58:26:d7:bd:23:ce:fc:a1:c0:9a:88:7a:7b:1d:74:
36:cf:0e:52:9e:35:1e:08:e5:9b:7c:88:72:da:dd:
4c:b1:34:14:49:14:7d:7b:4b:36:94:92:53:be:2d:
ff:6f:42:79:b6:d6:63:ca:fc:23:d7:17:52:fa:e1:
9f:a3:a0:2b:00:c9:7b:bf:b5:bd:11:6e:e5:27:fa:
91:b2:b6:36:80:b5:d4:6b:5d:6e:87:db:15:6f:c1:
02:47:2e:22:8f:db:5e:d3:0b:04:54:d2:a9:d0:f0:
ac:87:04:cf:e6:81:f1:f4:13:df:a1:4a:30:72:08:
d3:7b:dc:11:19:63:60:d8:fc:78:78:bb:6e:80:7e:
23:ed:3a:8d:ba:97:45:4f:00:64:72:a6:da:c1:ed:
d9:e5:6d:11:11:54:ac:1b:8c:c4:b7:ad:86:3c:d7:
be:88:22:0e:17:ca:c0:e4:a5:06:36:41:75:ec:a8:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:F6:AF:88:48:ED:E6:ED:24:25:AF:B4:74:98:8D:AC:4E:2D:96
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:06:c5:92:54:8b:30:e2:bc:a1:8f:80:6f:85:ba:28:5c:
73:e2:01:95:ec:a5:9b:f3:d7:40:b3:cf:69:7b:de:2b:e2:17:
d2:c9:13:15:0f:43:d7:23:e9:db:57:fb:6a:74:8d:6e:5b:30:
9d:af:0e:69:86:5b:e2:f0:b4:28:c0:6a:7b:a4:84:bf:41:98:
a1:12:ab:31:66:ae:2e:1a:6e:c2:df:cf:56:d3:74:99:11:2e:
7b:97:aa:52:8d:09:0c:99:cd:e9:49:5b:23:1c:3e:01:1d:6b:
90:32:9b:6a:c8:97:a7:da:a4:03:ea:a5:4a:19:49:c9:19:ff:
46:1c:a3:d1:28:e7:d0:0f:06:10:44:6b:18:f4:33:a2:a9:6e:
80:f0:23:ab:17:b3:a3:d8:4e:ae:f1:ea:3f:3b:8f:c0:72:33:
12:6d:4c:8a:35:1a:1a:53:18:c8:9a:f2:e6:c5:15:3a:c7:d0:
2c:a2:3d:e2:7d:2a:d6:1d:28:c4:be:6a:6f:c2:0d:29:e9:74:
15:35:bc:c4:dd:57:5a:c6:fb:03:14:63:04:a0:1e:48:af:5c:
91:be:e8:f7:f8:7b:70:49:c9:c5:51:45:b7:0c:0c:d7:68:fc:
53:0b:9c:78:1f:df:96:80:d2:4f:8b:96:65:59:bb:0f:25:17:
55:25:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:09 2025 by rpki-client