Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
File: l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft (raw, json)
Hash identifier: Jdc6b72mu5JsRIiRJusNMiJFEFSyavWlmXPn4pOtf4s=
Subject key identifier: 04:B6:F7:8D:E2:23:A8:AD:DE:47:CE:BA:97:85:6C:FA:B0:9F:0D:AE
Authority key identifier: 97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
Certificate issuer: /CN=978f41e290285473c2a1e2be7f66f63452ed4644
Certificate serial: 0194BD853B61FE9BA56AC3EF7D94FBA55ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
Manifest number: 135F
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 3FnVY4sBG3BUNdCMlG69JrkCRk4.roa (hash: xbgs2co1eheJ2l8YrvPyfXeU2aKPVWbDIStArstZGzA=)
2: l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl (hash: FAyMAVXNBY+/ap3EewMorIxCXoCnDK3sZRoUTSG3ki8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:61:fe:9b:a5:6a:c3:ef:7d:94:fb:a5:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=978f41e290285473c2a1e2be7f66f63452ed4644
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=04b6f78de223a8adde47ceba97856cfab09f0dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:b7:5e:41:8b:eb:bb:54:c5:15:f6:c4:33:
30:d1:e7:bf:0e:fa:74:eb:6d:54:7b:ee:9b:13:fe:
97:7f:69:68:99:36:7c:3c:b4:be:29:85:7b:f1:cc:
ad:7f:e1:b0:d9:e7:29:33:a7:2f:c7:ff:34:44:41:
54:6d:92:d3:39:14:3f:f7:25:ab:9d:01:e6:d3:60:
b7:80:4d:7f:33:b9:1e:36:16:60:9c:34:ea:05:55:
e7:42:fb:0c:d3:69:d0:5a:14:bb:a7:d8:01:6e:75:
5c:fe:12:96:1b:21:0d:09:bb:ac:79:16:14:c5:1d:
d4:91:cf:f0:1a:53:d3:aa:8a:90:5b:20:4f:cc:04:
73:2a:b9:d1:37:cf:82:2f:1e:e4:49:62:6c:19:ea:
24:8b:74:f6:1f:43:19:f6:20:b8:2a:cd:41:e0:1c:
0a:af:89:b0:df:51:08:d6:86:a3:4c:dc:c4:50:32:
a5:06:76:97:bc:81:82:bf:b8:21:45:6b:53:88:cb:
a8:80:3c:6e:4b:f3:61:8f:62:ef:d0:b9:9e:ef:3b:
63:87:12:78:83:36:da:9f:3d:8b:b4:69:59:27:e2:
b8:d9:32:fa:f7:ba:46:b6:24:a6:ea:b7:0c:cc:8d:
15:80:61:00:c2:6d:19:19:e4:71:f6:b7:a9:45:b1:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B6:F7:8D:E2:23:A8:AD:DE:47:CE:BA:97:85:6C:FA:B0:9F:0D:AE
X509v3 Authority Key Identifier:
keyid:97:8F:41:E2:90:28:54:73:C2:A1:E2:BE:7F:66:F6:34:52:ED:46:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l49B4pAoVHPCoeK-f2b2NFLtRkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f1480f-76e9-4c8e-ac32-3577b1efdc78/1/l49B4pAoVHPCoeK-f2b2NFLtRkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:1f:dc:3e:9a:46:b0:03:5a:16:bc:c8:2e:6d:21:70:9c:
29:05:46:f4:12:0e:8f:6b:e4:35:7d:0b:11:8b:97:e8:95:2d:
18:af:5e:2b:6c:48:33:07:f8:03:28:3d:52:56:1f:3b:b1:4d:
e8:ce:5e:4b:49:86:d0:a4:f5:87:ab:ed:9e:e4:4c:bf:d6:99:
4c:6d:6d:f4:fb:a7:4a:ed:23:7b:6c:a4:ec:23:c4:db:cc:ea:
b3:a7:9a:b2:2e:55:a3:17:b8:e2:60:b9:9c:00:60:07:d0:2c:
a7:a6:32:8a:70:e0:21:b6:f6:28:bf:3e:8b:3c:21:a8:73:ad:
77:b0:19:65:ea:37:ce:e5:4a:64:e5:66:9b:ff:5f:c5:f6:a4:
7a:47:bc:ae:9c:ab:12:47:0a:bb:bb:e7:4d:a9:96:b7:06:35:
70:8d:c8:23:bd:e6:e4:14:47:4a:94:81:f7:70:8f:3c:02:d1:
4a:3f:51:5e:cb:47:2c:d5:1c:1f:47:af:c6:9c:72:f6:e1:30:
d3:49:db:65:ec:e7:57:76:fe:f4:03:6e:28:cf:46:2b:aa:a5:
e0:7d:a5:f8:8c:61:c6:82:96:eb:d5:ae:54:94:5d:19:1f:3c:
53:a8:01:17:9b:83:64:46:10:56:15:74:d5:44:45:5a:85:a5:
61:5a:3a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:47 2025 by rpki-client