Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: aPchGq/N0N6dMe7/ZPt17wLDdndbc8TqrVwOnKfT8ik=
Subject key identifier: 75:89:D1:E8:23:1E:31:D3:F4:F0:9F:9D:3F:26:1D:83:77:2A:EC:03
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0194BC04A21E34683E1D00C7DDAF50765081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: wEx3EjGZ0uFL8xxmjujM/Ui1Y3kpk0BFHiuo2kR1/DU=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:1e:34:68:3e:1d:00:c7:dd:af:50:76:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=7589d1e8231e31d3f4f09f9d3f261d83772aec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:55:5b:1c:de:66:37:78:b1:14:47:5c:21:e1:
01:6e:9f:96:dd:02:34:a4:cf:2b:6a:c5:4e:24:1b:
04:d9:4e:68:06:67:5b:af:18:7b:49:4a:3b:74:df:
37:de:3a:84:4d:15:58:6f:da:e8:b0:36:3f:d0:ed:
d5:58:7c:76:d0:bb:28:86:8e:00:a8:71:85:c6:68:
21:6e:cb:3b:de:ee:9f:04:fd:3b:c8:2d:e4:9d:11:
bd:55:e4:55:99:bd:e9:08:81:2a:81:ab:36:d1:0a:
5e:0a:07:3a:e0:c7:50:47:fc:fe:72:3a:93:b6:bf:
d8:d2:a4:5d:39:f1:1f:d5:05:c7:06:05:1b:8a:52:
f3:09:07:d1:7e:b9:3c:d1:b1:5d:3d:ca:85:26:6e:
8d:9a:dd:fd:20:f0:ff:ee:73:fd:9b:71:a0:61:7d:
ef:ba:ef:22:bf:79:43:5e:72:f1:17:a6:cd:a3:ea:
8f:63:09:40:c8:21:d3:d5:e7:c2:15:a8:02:4c:6d:
20:7b:fb:64:d3:3e:13:38:2d:8f:a7:23:4c:c5:25:
23:8e:b8:b5:63:7f:80:05:9d:1b:83:c1:51:d5:84:
6c:43:5c:7d:45:33:a6:04:6f:50:3c:94:6c:ca:69:
68:21:50:d9:44:52:01:b4:8a:5a:2c:15:e8:5b:a8:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:D1:E8:23:1E:31:D3:F4:F0:9F:9D:3F:26:1D:83:77:2A:EC:03
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:3a:a5:ae:1c:3c:3f:51:2d:ad:ed:01:9b:2d:dd:89:4c:
91:a1:83:d5:fb:dc:cc:bf:4b:c3:dd:75:fa:f0:9e:1e:2d:3c:
72:5f:0a:fc:1a:2e:c3:d8:4e:48:7b:bd:a9:ae:75:9c:47:8f:
7f:f9:ba:2d:10:eb:76:9d:7d:40:17:1f:8e:69:67:2c:9d:cf:
68:4f:59:86:0a:5d:1f:0d:4f:f9:1a:97:df:64:3d:28:39:88:
c0:6c:7b:d6:a2:39:a0:93:ab:a5:54:89:f7:88:a6:2d:a6:92:
84:3e:f4:48:ea:26:03:f2:fc:e5:c0:86:35:4e:f0:d6:b5:d4:
30:7b:ef:74:03:54:6c:ce:3b:b2:94:5d:55:2e:ce:b4:49:55:
42:d0:1a:a9:50:29:6c:c3:73:a8:90:99:c9:80:09:67:60:4e:
2c:6d:3b:5b:7b:31:8d:5f:b8:76:d3:0f:be:d5:a7:eb:5c:ff:
e8:8c:62:a1:5b:1f:7c:8b:a1:37:40:22:46:96:6a:06:e8:bc:
62:38:65:55:3d:63:e6:a6:28:3d:f5:e4:2b:74:ed:93:66:ef:
69:38:49:2c:66:49:19:55:db:a8:8e:f6:1c:a1:f1:bc:5d:40:
0c:51:69:51:6a:da:88:3b:c4:ea:6c:ba:49:de:45:b4:f1:8d:
25:cc:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:49 2025 by rpki-client