Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: CSw6/wbRQUrLvJn7GwkFRpz+N+IuxYgHC8nW0/UV4Lc=
Subject key identifier: A5:95:14:BC:48:E1:97:56:0D:64:69:E4:2E:9C:F1:56:B6:23:35:B2
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 0194BC3C164B4B08C7B9D6C4427EBE8BB31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 138B
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: WOUC9QDBPPKqvr6jOF25Yh1BRdPAHQFFgQ1o4x614es=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:4b:4b:08:c7:b9:d6:c4:42:7e:be:8b:b3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=a59514bc48e197560d6469e42e9cf156b62335b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d1:04:1a:54:e9:db:e9:24:57:b1:e9:7c:46:
21:a6:3e:04:0d:7b:cc:4a:d5:0f:91:8b:13:ae:a5:
44:66:de:11:27:d8:ed:90:bc:ba:ec:9a:7c:58:38:
94:5a:f5:11:d1:af:29:e1:2b:ed:99:ae:af:97:24:
72:25:46:16:85:f8:3b:d4:c4:82:4a:fc:e5:a4:99:
89:e0:f2:71:e0:7c:f8:2c:95:ce:0e:dd:68:1b:5d:
d4:4a:0e:48:47:7c:e1:06:b3:90:2a:80:a6:48:ea:
96:ca:0b:de:b1:8d:e1:83:8f:dc:7c:a5:4b:c6:26:
83:c4:e8:77:fb:e1:a9:10:86:77:b4:d1:e2:cc:a3:
75:7c:d1:4b:4c:84:9c:0e:f3:6f:08:ac:fb:41:72:
12:11:f1:82:cf:0e:8b:a7:a4:11:a3:93:dd:01:c2:
8f:f8:f4:cc:6a:45:55:fb:2f:b5:a7:61:bd:ed:64:
f5:c5:37:14:21:28:91:1b:62:0f:6b:5a:37:7c:18:
6e:87:e5:00:f1:be:be:26:11:e1:0b:b0:63:b3:aa:
ce:d6:24:ce:da:c5:5b:49:88:8f:cb:c8:11:dc:13:
78:4a:c7:9f:c2:8f:d1:57:64:58:b8:c3:51:cc:36:
19:bd:68:b3:d6:39:cd:df:49:af:78:0d:c4:c6:cc:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:14:BC:48:E1:97:56:0D:64:69:E4:2E:9C:F1:56:B6:23:35:B2
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:86:a8:5b:db:f4:09:0f:4c:27:93:f4:c2:6f:ab:a3:cc:
b1:df:4e:79:9c:a0:89:93:6d:00:c2:44:09:36:d0:ef:6f:07:
50:7d:ce:15:df:ae:3f:12:09:3c:b5:a9:bc:a9:d5:96:62:4b:
e3:ef:45:5b:06:91:b0:d1:9b:ed:09:7c:4b:c4:15:4c:8e:fd:
09:27:28:12:03:2c:b3:1b:b9:aa:a0:f5:fe:be:0a:85:10:4f:
0e:65:1c:ae:41:da:18:16:d7:c4:76:14:c4:8f:3f:5c:66:d1:
58:25:d7:ff:3b:63:3b:32:03:9c:d5:13:75:ff:50:95:79:34:
7e:c2:fd:29:fb:a7:5d:c8:2d:d3:51:bf:9b:97:88:73:b8:32:
70:aa:79:3e:e9:f7:3c:20:af:c1:3b:fe:fb:8a:e0:ff:2e:ad:
2b:93:e1:ae:77:bc:48:fc:6f:dc:2f:1b:24:82:f6:f3:79:16:
1c:9a:47:7a:73:9d:f6:6d:8b:5c:ba:03:94:52:89:a4:ad:60:
08:cb:7e:0d:1f:19:6f:2d:40:eb:19:08:31:2b:38:e7:8d:d3:
20:57:d5:10:e8:21:1d:c4:0b:6d:79:69:5d:5f:e9:ef:97:01:
dd:be:5c:86:70:12:b8:41:1a:96:43:c1:f1:10:6a:a3:3f:4c:
e2:8a:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:14 2025 by rpki-client