Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: 6kJLh+GVJIG2UpCnGV6EXYy7xNbGeCMObMvbhgryFGc=
Subject key identifier: 30:68:9A:08:44:36:B5:F8:80:1C:A8:5F:AE:0C:CE:EF:16:09:01:0A
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 0194BCA9792076A07AFF087C4EBD2AAA2405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 03BE
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: a3hvCiygkPCObFy9qsTypwPnkq3f9YkfjmO8LK2NsZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:20:76:a0:7a:ff:08:7c:4e:bd:2a:aa:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=30689a084436b5f8801ca85fae0cceef1609010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:9c:1c:5f:64:00:95:3d:f4:73:07:1b:a4:
cb:79:37:5e:98:1f:5c:6f:df:c1:00:2d:53:bb:8f:
08:09:6b:f2:53:5f:a2:cc:9f:04:13:64:4e:64:7b:
b6:3f:e0:23:c9:d3:af:a1:7f:54:fd:98:31:1f:a3:
c8:e2:14:5d:71:dc:bb:c2:45:5a:42:15:02:1a:46:
b4:c8:7a:18:df:54:34:d3:be:ff:83:32:93:4f:9c:
2b:f8:52:83:aa:5b:ff:73:9a:e8:c4:80:4a:c2:4c:
a6:c9:f6:5a:78:53:63:9b:b3:71:9b:f4:c7:d9:7e:
4b:c6:3d:20:67:50:63:20:e8:68:0f:da:b3:87:1a:
45:1f:f8:6f:69:5a:4a:aa:db:d9:14:af:2e:d1:5a:
9e:b9:2b:70:a2:79:ff:b1:39:73:8a:25:cb:18:d8:
66:d6:d1:9f:1f:7a:80:c6:b8:91:28:4f:5c:34:42:
40:28:db:c6:5c:15:e8:fd:21:b1:96:d8:6c:b0:a2:
66:b4:06:5a:44:d4:f2:5f:9a:90:3d:52:37:65:a0:
64:33:14:32:59:f3:af:09:8a:97:22:c2:c9:03:13:
49:32:61:7a:ef:32:b1:b3:dc:f2:cb:58:3a:76:57:
1c:52:74:3c:9d:a1:e3:6a:44:cd:7c:17:37:f9:9f:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:9A:08:44:36:B5:F8:80:1C:A8:5F:AE:0C:CE:EF:16:09:01:0A
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:70:cc:50:72:65:be:5a:f0:f8:f5:7a:c2:74:6f:4a:18:e3:
44:af:96:a8:6b:86:81:5d:52:bc:af:ac:ed:31:b0:1a:e4:e3:
04:80:f3:55:9b:8d:9f:5a:a5:87:ea:86:61:de:e5:36:84:d0:
8e:26:97:05:88:b1:70:d9:36:43:05:16:ee:da:30:4c:ee:c0:
19:c3:24:f0:e8:b1:6e:87:26:9f:61:d5:55:39:95:b1:82:e5:
41:57:23:85:72:77:c9:40:78:62:2c:27:a3:ca:03:1b:b9:a2:
1b:39:0b:ff:b7:2d:8d:9f:94:a6:22:64:c1:52:4f:82:d5:b3:
45:52:bb:02:70:7a:de:ab:c1:c8:57:ee:6e:74:f0:91:68:23:
28:87:6e:ce:9b:72:19:22:d1:11:6c:2d:6a:e9:13:46:88:72:
7d:fd:e5:66:7a:61:9b:83:06:0e:88:3f:b0:5c:a1:0b:ea:f0:
a1:3a:37:ca:bc:a1:d7:f6:d6:91:aa:90:67:be:3d:3c:02:d5:
89:ac:27:79:ef:86:f4:88:12:2b:dc:ce:cd:e3:be:72:28:71:
cb:ee:7c:40:ed:a7:a8:4f:c7:2a:85:92:f4:14:1a:88:d0:7c:
1e:58:9f:4e:00:df:bc:b1:8d:77:8b:71:33:70:cc:15:e9:d1:
87:25:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:14 2025 by rpki-client