Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
File: 27mAEFNsQG6o89ZlWUwijXbrEP0.mft (raw, json)
Hash identifier: yI20ACMUwubM1Yzgr+IGCylJ2itupdA4OK4x6UB7xZw=
Subject key identifier: A9:B1:4E:98:15:D6:BE:FA:C7:51:F5:59:38:00:58:2B:09:CD:0C:7F
Authority key identifier: DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
Certificate issuer: /CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Certificate serial: 0194BCAA07B36A4DE0DAE8553FDF1E64CAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
Manifest number: 0EAF
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 27mAEFNsQG6o89ZlWUwijXbrEP0.crl (hash: n+5OM3MjbPFxfo/xjuhhRHnAdHfk78eL58o/+oQ3k6Y=)
2: 462bBm4iwjQVO5xQHm8PCwvYoHY.roa (hash: dqD+m/gujJ0eHtncIX933mchElI1Kz0NU3ueb9Vzn+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:07:b3:6a:4d:e0:da:e8:55:3f:df:1e:64:ca:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb98010536c406ea8f3d665594c228d76eb10fd
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=a9b14e9815d6befac751f5593800582b09cd0c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:12:9a:c8:82:6b:f7:15:9c:11:05:21:d6:
d1:18:55:be:7a:85:fb:dc:90:f6:80:57:73:6d:8f:
2c:04:b4:1c:69:87:3b:f8:af:c0:2d:ce:9f:24:b2:
b2:85:21:c4:38:fb:be:81:3f:fe:58:7c:21:ca:6b:
2e:22:29:12:40:64:37:5a:d4:56:e2:cf:e7:5e:5a:
1a:ac:78:ff:c4:fc:2a:8a:bb:f6:3a:06:fb:99:e7:
8c:71:30:92:c3:bf:18:bb:f6:04:17:1c:02:e4:79:
74:19:09:ea:3c:d6:80:dc:d1:5e:5a:5a:6c:5e:92:
23:90:59:4d:f7:ea:f9:59:c2:e8:8f:81:0c:9b:bd:
e0:cd:a0:bf:12:1f:d8:6e:53:16:92:fb:97:e3:91:
d2:87:01:2a:67:60:16:3a:6f:fb:22:d5:64:bd:ab:
25:7b:11:55:0a:39:0a:b4:cb:18:50:38:1e:88:82:
65:fb:35:5e:05:fb:20:de:93:20:31:4c:9d:46:91:
3b:28:ad:2b:3c:64:b9:b3:f3:23:bd:73:ca:df:9c:
60:b4:a3:7a:f9:6e:90:54:d3:34:e5:f5:d0:f6:91:
24:a4:eb:95:68:f5:33:3d:b7:e4:4f:3e:09:e8:54:
29:24:1c:79:04:b2:73:da:65:4a:c6:a2:a4:53:eb:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B1:4E:98:15:D6:BE:FA:C7:51:F5:59:38:00:58:2B:09:CD:0C:7F
X509v3 Authority Key Identifier:
keyid:DB:B9:80:10:53:6C:40:6E:A8:F3:D6:65:59:4C:22:8D:76:EB:10:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27mAEFNsQG6o89ZlWUwijXbrEP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7f3d9-a501-46af-b9d8-72081bd4cd8d/1/27mAEFNsQG6o89ZlWUwijXbrEP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4c:15:9b:ce:22:12:2a:4d:d7:3e:16:bd:c9:be:26:96:fe:
a5:a7:b1:30:cc:3f:57:67:90:57:e4:c5:c2:8b:b0:19:f3:14:
a7:b1:54:23:ff:4f:6a:d6:72:e7:a1:4b:89:07:ad:bc:64:73:
87:08:15:50:f5:66:bc:11:29:ff:6d:e9:15:b0:7d:31:d1:ca:
3b:6c:03:30:b1:db:0a:eb:20:56:70:23:df:ed:4f:29:41:46:
f7:e8:11:36:28:f2:bb:a3:ab:16:e4:92:1d:a0:6c:ba:7f:9a:
ef:55:51:4f:05:69:7c:fa:4a:9d:6b:75:c3:10:e1:32:69:60:
21:33:ba:c6:73:ca:8c:1a:a2:cf:44:b8:8e:71:65:70:ee:28:
78:9e:71:99:95:fc:ea:da:aa:fe:11:37:ab:e4:18:81:a7:ce:
b4:b9:d2:0c:67:57:09:fa:36:af:06:2c:52:b9:e1:a8:63:e9:
9c:cc:cb:9a:5b:2c:b7:f3:c9:ac:e9:82:58:5d:59:2a:30:8e:
7e:0b:a2:5c:5b:79:ef:fd:24:c5:c7:12:2c:d7:55:3a:7f:2e:
84:86:97:ff:48:b8:2c:be:66:97:a6:5a:c6:eb:72:ee:40:93:
a1:5a:f1:55:0a:ef:2c:71:fe:6c:dc:2a:2b:af:2b:73:d7:15:
d9:6a:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:50 2025 by rpki-client