Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File: R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier: cGGA0Y8orqSyYyUz+wGzqlRAH2FRK0kh+dh1jXVVR18=
Subject key identifier: BA:CC:00:84:E6:56:BA:82:10:8C:46:88:C8:89:E9:ED:3A:BB:09:6C
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer: /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial: 0194BC04B8FC290F0174091BBFAF9C40F52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: J8QGJMewV8bmzKUwpLReoV13T9flwMuk6iM07YmxSUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:fc:29:0f:01:74:09:1b:bf:af:9c:40:f5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=bacc0084e656ba82108c4688c889e9ed3abb096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:ae:a7:2f:21:d7:3e:de:a9:80:e8:55:5d:
2f:c1:97:9d:1c:ff:8f:bd:53:f1:65:fe:70:1b:88:
b4:86:bf:2c:a6:97:f9:2b:55:e5:99:46:19:9e:50:
6c:75:13:85:89:98:78:df:19:94:c1:82:b1:24:cd:
99:04:93:46:82:d1:8a:e2:1b:f6:c8:92:f3:db:d3:
82:90:5d:04:af:03:de:09:46:a6:38:21:27:48:b9:
15:03:7b:9b:98:d5:b3:fe:84:3f:b9:32:1b:c1:0b:
06:10:f0:9b:68:72:c0:ad:a7:84:a3:c9:07:fa:1a:
61:2e:2b:5d:d0:14:a2:de:7b:83:ae:d5:d2:7f:e5:
48:3f:9a:41:ff:b9:a0:06:16:70:19:39:85:ff:4c:
dc:75:f1:de:bc:9f:02:5d:a2:16:50:ac:2b:be:c6:
c9:a2:ec:bd:04:62:fa:a3:0a:9a:59:83:a8:80:24:
5b:f1:cb:1c:2a:39:a4:a2:62:b9:dd:c3:0f:32:bd:
a0:d5:75:9b:4a:f8:9d:6f:e3:8b:dd:a4:a7:1b:1d:
06:66:2d:85:b3:f6:bc:83:28:fb:b3:fe:59:58:aa:
66:1d:39:72:bc:ef:c3:ea:bc:4a:d1:1d:06:31:85:
f7:fe:da:4f:75:a7:51:7c:9a:0c:a7:b8:a7:bf:6a:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CC:00:84:E6:56:BA:82:10:8C:46:88:C8:89:E9:ED:3A:BB:09:6C
X509v3 Authority Key Identifier:
keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f9:69:40:31:7b:6f:31:ab:cd:df:5d:ea:8a:4b:ed:84:e5:
e7:7c:16:7b:45:2b:86:ab:04:dd:c9:8e:a5:b2:12:a4:64:06:
f3:20:9f:bf:6d:9e:b3:da:86:f9:92:8c:2d:80:76:e5:d8:72:
09:db:86:e3:05:d6:7c:ec:bd:ac:9c:e5:75:90:2f:42:e8:3b:
11:46:67:10:2d:d6:61:96:c9:35:3e:6f:c0:77:41:8b:31:31:
e0:37:61:48:31:27:b9:0a:f2:23:e9:c1:66:7a:74:37:c6:fe:
76:48:af:93:15:e3:e8:b4:33:b2:cf:36:9f:44:f8:1e:20:5c:
3f:00:85:2f:c5:97:16:18:82:8f:08:3c:bf:32:a1:0c:24:7e:
9e:f6:ea:58:95:42:54:3e:02:92:d4:59:cc:f0:3d:08:46:3a:
45:2c:75:1e:03:88:13:ae:ec:71:0f:53:93:df:76:17:a9:cd:
d1:f5:f7:9e:b6:0f:a9:88:ca:f7:5d:51:de:b0:94:f0:6c:01:
e3:90:f1:9d:7a:a5:8b:20:01:fc:96:b5:bd:a5:fa:65:e4:35:
48:e3:8f:84:82:4c:78:9b:1f:79:b4:46:be:ee:8f:b9:58:2c:
23:93:44:ae:3c:5e:8e:ad:83:7c:e2:c3:07:f9:03:19:fa:8a:
07:82:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:54 2025 by rpki-client