
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File: Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier: YKdBbfIQDY0vbFdlUMXY6kmHY9H1d8Wfg08/Cpz95Ho=
Subject key identifier: 68:A5:12:5B:64:D2:F8:74:5E:6E:C4:05:D6:52:B7:CD:FA:BC:4F:C1
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer: /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial: 0194BC0527DB55D251A4ADC5A42F572686EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number: 04A5
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: HSSlgSJibMMQ3JCUvYKPc4PUCmN97AkL/AoWQHLJC18=)
2: ys86q5jXiENW-WW7AK-nkVinoug.roa (hash: PK1sfbQN38TktvS2UC6cxV1eHaxPEymB6l0sa2UeYfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:db:55:d2:51:a4:ad:c5:a4:2f:57:26:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=68a5125b64d2f8745e6ec405d652b7cdfabc4fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:5c:b2:66:d2:f3:0a:35:af:91:b9:d0:1a:
96:0b:2e:e4:a5:10:b9:b2:ba:44:7d:86:dd:59:bb:
14:a4:26:1e:18:ee:98:3a:24:43:52:26:9f:65:d8:
16:71:15:0e:6f:9f:1c:05:b4:e0:64:41:60:2a:d4:
81:7f:19:22:16:4b:52:99:06:75:7e:56:7d:29:57:
0d:57:1d:f7:b6:ba:48:17:4b:ee:bf:87:c3:02:42:
00:c7:dc:47:a3:cd:13:73:d9:1b:1d:7a:01:8c:3d:
66:25:61:87:e8:c0:b5:ef:42:9f:3a:bf:77:04:b7:
64:a8:1e:15:47:7b:22:5e:70:0d:11:f8:98:a9:31:
23:ae:db:e9:8c:d5:49:dd:4e:60:45:04:0a:9d:b0:
e0:6f:25:ba:eb:93:61:e2:95:61:e3:d6:81:5d:9f:
4f:a7:be:6e:00:92:a6:6c:8a:1e:93:24:1f:11:f5:
da:33:b2:30:1d:a2:9d:c6:a7:bd:4d:f3:da:2e:f4:
f0:94:47:f6:07:82:ad:99:92:d3:4e:36:b0:38:9e:
cf:e7:59:eb:be:64:d1:8e:60:bc:e2:04:96:3f:6e:
03:4c:d7:24:c7:cc:7b:81:1d:70:2c:cf:a9:d4:b8:
1b:cd:9c:3b:18:ff:5c:90:f4:d6:04:df:9b:bc:d5:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A5:12:5B:64:D2:F8:74:5E:6E:C4:05:D6:52:B7:CD:FA:BC:4F:C1
X509v3 Authority Key Identifier:
keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:97:2f:9c:f7:bc:de:06:4b:d5:26:79:9d:4f:f4:33:e3:0f:
36:92:f9:c3:b2:4b:c1:6f:e7:3a:45:c6:72:ba:a1:fc:05:36:
8b:ad:8f:ab:44:e8:80:e5:4c:24:0b:da:0c:9a:63:8f:46:13:
86:b0:4a:e2:a2:c5:b3:7a:7c:7b:1b:bc:5b:c4:b6:88:fb:a7:
a6:08:e8:7f:47:3b:81:16:65:6c:67:db:5f:30:ed:f3:01:ed:
f8:32:8f:6a:64:7c:60:7d:cd:16:ed:ba:b5:f5:ed:f6:2d:63:
05:77:43:38:d3:35:10:f3:44:02:a2:fb:68:f2:61:37:22:21:
7b:a4:ff:2e:0f:59:9c:17:43:3b:78:ed:99:b2:5a:6a:97:72:
f3:1b:4f:48:1d:22:1f:b2:91:f7:df:99:35:03:cf:14:0a:af:
2f:a4:17:78:5c:e1:f4:58:4c:90:5b:34:d3:13:36:5c:c1:00:
9a:24:47:51:ca:fb:c3:bc:39:12:1f:7c:71:87:84:69:29:4f:
e7:83:67:a4:4e:23:dc:63:97:98:a0:83:4a:9b:ff:63:8e:12:
54:83:11:7b:ec:f5:9f:a8:49:b6:9b:c5:43:fe:ba:e0:7a:39:
e9:ea:52:26:ea:2c:ff:b6:05:95:29:be:f1:0a:7e:19:f6:c4:
21:61:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:42 2025 by rpki-client