Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: BArL6zK2qLOUM+3ewSbskgz/Ulm1k+GSlKxRiBFO2pE=
Subject key identifier: 27:F0:FE:AD:62:56:2E:AA:EE:C0:A4:44:B1:AE:8A:8D:E2:FC:D5:9B
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 0194BC3BF2A45D2418D93861B92D7F997B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0C9E
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: Yf0vfsSga+MDnSOdeiAtWNFeszXfuYjmxbZGJPFAVRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f2:a4:5d:24:18:d9:38:61:b9:2d:7f:99:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=27f0fead62562eaaeec0a444b1ae8a8de2fcd59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:6b:69:19:c0:27:f6:8a:93:60:04:e7:25:
b6:84:c4:e7:4e:ed:6c:a3:ff:1f:c0:7b:68:68:74:
3c:1f:ab:62:60:e4:25:6a:43:fb:5f:f4:19:29:f8:
01:5a:2d:3a:2c:4d:3e:2b:60:4d:4e:26:a0:ff:ad:
ba:66:c4:5e:4c:94:04:36:23:42:12:9c:21:96:a9:
b2:0b:21:4e:aa:74:8b:3f:ac:5e:e7:a3:3a:17:da:
fc:13:20:00:e7:df:5d:a7:e2:4d:b4:ce:da:c3:2e:
50:68:1c:90:cd:0b:4d:f9:36:1b:98:9d:96:42:08:
94:8d:55:46:90:b2:2b:ec:5d:00:5c:89:0c:37:31:
1a:0e:fa:23:bd:c4:69:f4:43:2d:cc:59:98:1d:ee:
3b:fa:ae:e4:d7:ab:03:f0:4c:f1:11:90:0e:4e:ba:
ae:8e:1c:48:4f:49:9c:f0:e6:59:ef:63:20:c9:88:
03:22:7c:23:26:73:4d:f5:01:9f:c3:34:81:21:a0:
e5:21:7b:e7:36:b5:38:e2:23:40:2a:82:ac:8c:e0:
4b:bc:f4:95:d5:69:16:32:2d:67:06:21:6d:99:6d:
7e:ee:11:71:a0:c7:5d:b0:81:e4:97:83:bf:71:91:
71:fc:d9:38:1d:da:ef:10:55:35:1f:62:6a:34:c8:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:FE:AD:62:56:2E:AA:EE:C0:A4:44:B1:AE:8A:8D:E2:FC:D5:9B
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ce:08:df:72:07:f8:8f:a8:21:67:86:38:0e:e6:04:db:ff:
93:43:36:16:a2:a1:62:a4:57:b2:bd:91:57:06:7d:75:b4:c6:
7a:bc:7d:1d:b1:00:4b:8b:98:ba:1d:8d:09:bd:fd:41:7b:e1:
2e:cb:64:92:d1:2e:1e:72:d4:09:b4:4a:95:d5:90:8d:ef:cc:
1d:ab:9c:6d:33:3f:fb:05:15:85:6c:04:03:a1:0b:82:f1:ab:
01:f4:60:37:b7:de:4c:9a:f3:8a:39:e6:1e:a3:c2:61:76:4a:
a2:2e:c3:43:62:0c:47:c7:3a:e5:f7:9a:0c:c6:44:f8:af:d4:
73:ec:9f:5d:1e:04:55:f2:67:11:2c:2b:34:68:e2:ac:23:a8:
1d:03:cb:23:c2:d0:7b:df:fc:10:4a:8d:6c:c9:38:39:e2:86:
7e:1c:34:e2:bf:12:ea:31:47:25:f1:7c:ab:77:82:2b:af:a5:
d1:8c:25:84:bb:74:a7:3e:b4:10:85:79:f3:cf:f3:41:a7:1c:
85:49:03:b7:8c:76:d9:9d:8c:bb:ea:69:13:b5:26:af:df:0f:
23:a7:fe:d3:66:99:06:05:de:01:f0:2f:e9:bd:1f:43:1d:ec:
6a:83:15:cd:29:d9:c8:e7:73:a9:63:3c:a0:eb:8a:6a:5c:8d:
d6:3d:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:01:09 2025 by rpki-client