Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: pMkjttCaPIIEZiceBzq6eeFzMP/QTsCakKQA369B67A=
Subject key identifier: 7B:20:9A:49:08:55:88:59:AD:B1:67:97:0D:0A:86:11:5F:7C:81:00
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 0194BD1751179D3B993639A58B95BEA56166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: FCQtGTFcR2ZiaVygURjU2KxFj44SkrqK6jRA3bVGmKM=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:51:17:9d:3b:99:36:39:a5:8b:95:be:a5:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=7b209a4908558859adb167970d0a86115f7c8100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:f9:e7:a4:e0:af:c7:03:00:7f:97:16:6f:
ce:d1:3f:c4:07:88:1c:1e:b5:d1:9d:36:8f:b5:2d:
7b:d5:b9:de:0e:60:a8:a6:7c:a2:34:09:38:59:16:
08:3f:89:13:11:08:b7:4c:1d:ac:2c:7b:00:61:7a:
10:dd:1b:d6:3e:74:df:1a:86:61:78:f5:e0:21:70:
36:bc:4a:37:42:1f:2b:e6:78:6c:2f:70:c4:75:35:
cb:c7:28:dd:9f:9a:77:58:c0:1a:96:97:ad:76:e7:
2d:4d:e0:04:43:9a:3f:04:8c:65:18:35:ea:b5:8b:
8a:12:2c:db:b9:21:64:6e:b9:33:f7:79:6b:51:35:
46:19:69:f5:b4:d7:46:ad:1c:7f:af:52:d5:3d:02:
85:e9:bc:28:ab:1f:c4:ea:61:58:b3:f9:ba:69:6d:
ba:76:ac:42:8c:e6:67:17:8b:99:c4:0c:a7:72:05:
6a:ec:4d:be:f7:ca:ec:5b:29:84:68:b1:1c:e9:fa:
70:97:ca:74:e9:e7:88:24:62:0f:4c:d6:7f:c0:33:
dd:d9:26:fb:4d:c4:d7:1c:96:9e:a8:80:e3:87:11:
32:15:2e:94:48:0a:b8:8d:cf:b6:39:8c:fd:2f:30:
81:95:f5:25:a3:b4:d5:46:4a:f3:98:aa:4f:09:72:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:20:9A:49:08:55:88:59:AD:B1:67:97:0D:0A:86:11:5F:7C:81:00
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:60:d2:76:d0:29:54:e8:dd:1d:14:82:cc:b7:60:38:1f:
e7:05:62:5c:07:76:3c:87:a4:ce:24:db:a4:95:e2:e8:60:05:
e8:fa:a6:80:ea:13:bb:34:c2:9c:06:fa:40:2c:a9:fc:df:87:
87:71:e3:f8:5f:ed:12:52:40:cc:0e:8a:91:90:f5:61:71:15:
86:84:ee:b2:40:20:e1:35:b4:76:b1:f2:0e:a6:cb:df:66:49:
84:3d:23:7d:1b:d0:8f:98:b7:db:a1:a4:cc:15:23:e2:f7:d5:
f8:92:67:11:2e:e3:19:26:94:71:15:26:36:72:39:f6:54:5c:
c3:85:51:70:d2:ca:47:33:08:7d:24:71:57:9d:b4:52:3f:d6:
39:3a:a9:77:24:20:ba:86:04:78:6e:b5:a8:94:1d:ee:16:a3:
87:95:94:89:e0:8b:f4:cc:15:5a:1c:73:84:4c:74:64:bd:4a:
fa:69:08:ed:62:94:f3:de:01:8e:d7:e9:ad:9d:52:f0:7c:5d:
33:79:d0:c0:ca:d9:35:88:a9:b8:e1:5f:47:3b:b9:3f:6f:62:
9c:25:b0:c5:e0:54:30:13:93:fa:4a:7a:4d:de:a6:0e:54:f3:
54:b1:54:77:9c:88:00:34:42:1f:7e:5e:20:ed:56:42:f2:9e:
f9:40:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:37 2025 by rpki-client