Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier: TNx6JCUzLDCeq52cAFD0e5J6To89/A32bU3PDOfLPmo=
Subject key identifier: F3:2B:DC:8F:2D:B4:86:89:A5:CC:84:79:FF:71:4F:28:CA:E9:A7:5C
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 0194BD858E4FA963F36F59FAC65BE0374A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number: 0228
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=)
2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: 8xzYYW8seuSm+LPJnL+V/cjNoYcaHFXRQsnXY4kwi8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:4f:a9:63:f3:6f:59:fa:c6:5b:e0:37:4a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=f32bdc8f2db48689a5cc8479ff714f28cae9a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:2b:a4:7a:fa:49:4d:d5:dd:1e:2c:14:46:
5c:b2:13:24:ea:29:09:c9:26:b1:8a:70:ce:17:6a:
9c:7e:8a:f6:0f:2e:f8:93:58:de:c9:da:5d:36:ee:
cd:65:8a:63:74:0d:cf:9d:e4:e3:69:eb:ab:24:b8:
70:78:77:bc:1d:b3:7e:f9:73:2c:a1:1a:11:4d:d3:
29:a6:1d:1c:87:c1:cd:37:c7:b0:a3:2b:8e:b2:7f:
c5:78:f8:eb:27:14:bd:2b:68:7b:b9:fd:ae:51:66:
86:c1:f2:24:94:f2:4b:f6:11:4a:24:5d:94:1d:69:
9d:cf:4b:67:51:a6:a8:d8:81:ee:20:58:16:23:66:
a9:1d:09:42:92:27:6b:85:70:45:f7:d6:5b:65:43:
33:fe:3e:ab:ba:4d:79:31:4d:67:2d:63:08:3f:53:
a1:7e:07:67:41:b0:ea:f6:76:a9:e1:2e:58:38:bb:
41:a5:7f:1f:ab:6a:3c:59:90:10:8f:f6:50:64:12:
75:61:9e:88:1a:4c:a6:b1:c6:9b:02:b2:b7:41:aa:
f7:be:79:e1:7f:46:f7:67:75:de:f1:03:9f:b7:61:
d0:5a:a7:e2:28:10:49:59:1e:16:fa:5e:11:b0:25:
a6:10:fd:5a:1d:50:46:eb:d6:fd:62:c6:17:2a:08:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:DC:8F:2D:B4:86:89:A5:CC:84:79:FF:71:4F:28:CA:E9:A7:5C
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:2d:68:0c:ef:71:8b:b9:3f:c0:60:90:a2:cb:53:7f:04:
23:ab:a2:c6:b7:7e:2b:e9:49:3d:3c:c4:b7:63:e8:9d:4c:41:
a2:a5:cd:f1:22:29:df:6d:25:84:4a:bc:c8:76:7a:86:4c:c3:
85:bf:35:79:6a:c9:58:15:46:6a:27:78:fd:64:d5:af:84:23:
2b:c6:f8:9d:94:8e:aa:11:57:94:41:a9:cf:06:54:9b:2a:ca:
31:e7:8d:64:84:d2:e9:95:2f:57:9c:40:fb:f3:4b:f5:ac:e7:
2d:12:94:8c:82:de:35:e2:82:19:cf:56:38:e1:9c:0b:b1:36:
a7:6c:02:8c:c8:4b:c9:33:d9:5a:90:e3:73:3a:15:5c:2a:03:
f6:7d:79:c6:e0:23:c5:57:4c:bc:ff:3a:b5:d5:40:14:0d:2c:
52:37:83:03:d1:07:d2:ed:01:f2:4f:33:72:3d:e5:9f:05:06:
87:ce:74:16:4c:5b:cc:fa:ff:32:d8:7f:db:40:c8:ad:83:7c:
28:ed:f1:2c:d3:dc:fe:fe:47:aa:5a:f0:56:14:fa:5c:f4:95:
d7:54:df:a0:94:d2:42:dc:ff:aa:d5:08:70:ed:34:3c:99:f2:
c8:10:a3:74:58:72:ea:ce:f9:57:97:be:36:6c:78:57:fe:db:
c7:c0:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:22 2025 by rpki-client