Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
File: V1TRlSf9hdDURKyt1EoBZV_cdAA.mft (raw, json)
Hash identifier: 2EzqXGprcdGZVCDTA61X1YuU+S+nfeSepLX6SqbhZFA=
Subject key identifier: 49:99:D1:E5:E0:0B:17:0C:47:CF:2E:4D:EA:7F:08:68:F1:E7:C0:B0
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 0194BD17EED2DD9F02C1B5D786ECB520B937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
Manifest number: 8C
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: Kbd252jvPQYDxTMD_Zl_KcFg3wE.roa (hash: h2Sl2hV/wUjlwWCFohVNj5cRLKghSu334DTZIidyX0A=)
2: V1TRlSf9hdDURKyt1EoBZV_cdAA.crl (hash: TzVMG1JiPMVgs2PDtP1pDR020mt1R1gIWNFRc/i7ROA=)
3: vUbJMOIYeHF5tekXx2ov5VAjxfc.roa (hash: FS7Fil/iuZVeF4Jy7H/4V4R+rbeX8r0yC7AYMcGeH/Q=)
4: xNZWfqccja7LEzzsCPXt2kCUZHI.roa (hash: CImiLSKCWjj4ejMFlk2AWyWI5BHASdKwUNBHMBfHsYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ee:d2:dd:9f:02:c1:b5:d7:86:ec:b5:20:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=4999d1e5e00b170c47cf2e4dea7f0868f1e7c0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:ab:ae:53:15:f0:0d:8b:23:e1:12:6b:8f:
41:76:ad:cf:3d:70:d2:d7:0a:94:2c:56:ff:df:7d:
0b:7a:9f:eb:ea:ac:2f:28:b1:32:91:72:47:20:33:
cd:59:ab:e4:73:74:f3:80:b4:cd:4c:16:83:6d:8e:
36:b5:61:a2:ec:0a:73:dc:c5:50:71:c8:4e:6a:f4:
28:85:15:49:bb:87:11:3d:af:e4:17:47:46:9b:be:
80:bd:a3:b7:9e:e7:5d:dc:65:02:9b:33:7b:ed:16:
65:f5:9c:75:85:8b:cc:38:1f:44:c4:56:21:8b:14:
17:81:8c:8c:3d:b2:b0:52:74:79:87:3a:52:8e:32:
3b:64:65:4c:f9:c5:ba:3e:02:ab:ad:ca:45:ea:ba:
03:7f:9a:92:42:d7:9d:55:ea:17:9f:96:9d:72:5a:
e2:35:d6:1b:e7:22:9c:4b:66:4f:52:71:84:95:56:
94:5c:8b:38:6b:a2:37:8c:e2:e7:2c:1e:cf:bc:f0:
0c:40:31:22:05:96:50:d3:cd:d2:3c:4b:87:9e:f5:
7f:ea:88:21:fa:02:ab:85:64:58:40:fd:39:a7:c4:
68:19:f7:e9:d2:2f:84:ce:5f:1c:8c:29:76:84:13:
fe:c3:66:e4:a1:d3:38:26:01:6b:e0:3b:08:cb:1a:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:D1:E5:E0:0B:17:0C:47:CF:2E:4D:EA:7F:08:68:F1:E7:C0:B0
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:89:dc:ff:13:60:d8:c9:72:e8:94:78:bd:1b:39:8b:b5:f5:
e7:0e:de:82:1c:2c:38:bc:52:04:90:7b:e7:e8:eb:84:6f:fb:
11:5b:fc:e8:57:b4:45:c5:fc:db:b0:a0:46:24:c3:de:ee:74:
c9:cc:31:f4:c3:da:37:21:cd:5a:94:b3:93:62:60:c2:e0:af:
2c:77:28:aa:77:eb:21:07:57:07:c2:17:e5:f2:35:d3:fe:61:
c7:35:c9:1c:a1:e2:b9:68:a5:33:04:27:73:76:a7:e4:58:94:
38:fe:f4:92:9a:b1:b8:41:e1:cc:fd:94:d6:41:ff:65:a9:97:
bd:c2:e1:40:71:b0:fc:e5:d8:53:5f:77:45:56:0b:a9:a9:0a:
c1:d9:a7:38:8a:d5:74:b9:05:4f:ea:b5:0b:58:cd:07:fc:b4:
32:bf:8e:15:50:4f:26:85:af:cc:c4:5a:fa:2d:a7:f9:3e:c8:
3d:0e:82:07:39:be:fb:41:a6:7e:cc:c8:ac:90:05:9c:73:66:
af:e7:60:43:a9:00:cf:a3:27:56:2e:40:3b:1e:76:9a:f7:e2:
92:69:95:66:81:0c:51:1e:5a:17:4d:a4:8d:da:56:63:7b:2e:
1e:8c:8b:6b:b5:9d:a9:58:d8:f8:a0:5e:aa:23:fa:db:61:4b:
3c:f6:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:32 2025 by rpki-client