Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: GR4MCs+nKj3DhW+mIjW39fCnNFTVDTtXusLlTo0V2t8=
Subject key identifier: 9C:59:9C:7A:62:AB:AC:14:74:1A:32:8E:BB:B5:20:1B:D1:77:6C:11
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 0194BD17666214A3F8349B340D9E69E843B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: 2pfXXTj0vxXBb1kKL6EzkJBsN1CVUNjAy48pyM9UJyo=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:62:14:a3:f8:34:9b:34:0d:9e:69:e8:43:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=9c599c7a62abac14741a328ebbb5201bd1776c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:8e:90:13:f6:a9:a3:f7:6f:5c:8e:0b:32:
8d:87:80:d9:91:24:37:19:eb:67:a3:69:0c:fc:f8:
6d:f5:cf:3e:57:7b:6d:b8:a3:70:0f:41:d5:56:17:
8c:e8:ab:3f:eb:ee:0c:ab:a9:47:9d:56:d2:6a:4d:
53:3f:0c:2c:47:4f:9e:86:ed:25:86:cd:9a:35:e7:
9d:b5:3b:16:b8:b0:a3:22:79:78:ef:d2:08:ce:77:
27:d8:f4:4f:a9:40:86:bf:a3:36:e5:7f:ef:f0:3f:
2b:f7:86:59:11:e6:c7:4e:79:2a:94:b1:44:5c:0d:
66:83:dd:70:55:22:a0:06:fe:28:6f:4f:c1:32:c9:
3f:87:53:9a:eb:ee:65:94:d6:ea:f6:a1:fc:c7:cc:
8e:41:99:ea:92:99:46:4c:2c:ea:db:4b:41:91:d1:
e3:e0:7d:07:57:dd:30:51:33:33:01:0e:8f:1e:c8:
45:db:0a:61:c5:24:64:f1:cb:1b:f8:6f:a1:5f:2b:
11:3c:42:c5:47:65:26:f3:66:1f:e5:e8:aa:d4:7d:
69:f4:7b:f3:d9:16:73:a5:0c:3e:0b:a1:8c:76:9e:
91:b0:76:89:81:b6:9c:71:88:07:74:44:cf:be:1d:
fe:b1:e2:ff:f6:f6:ca:fb:70:29:f7:4d:ba:d8:a3:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:9C:7A:62:AB:AC:14:74:1A:32:8E:BB:B5:20:1B:D1:77:6C:11
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c5:84:67:19:6f:d3:e7:8b:da:9a:51:46:54:13:e6:2d:3f:
b5:ff:ba:2f:62:a6:c3:95:8b:00:64:79:2a:12:32:df:86:81:
fb:2f:af:b8:6c:0c:80:ae:03:d4:4a:e6:d5:0b:8a:b6:b2:00:
86:9c:5d:24:ce:ea:a8:0d:39:4d:f2:37:18:12:9c:09:ba:32:
9e:bd:38:38:3a:dc:70:17:26:8a:72:85:15:79:38:ea:d9:a3:
10:ca:db:57:c7:80:ba:cf:64:7d:dc:0b:20:c2:a4:b1:b8:17:
37:22:a1:69:00:7d:32:a6:20:45:8e:ab:61:42:f7:ea:df:ca:
ad:b8:9f:91:86:e0:2c:ce:ef:b3:07:c8:66:4b:1f:db:d4:09:
f5:8e:69:24:15:e2:cb:df:59:5c:01:ab:b4:8f:1c:8a:ea:d0:
2f:c6:57:64:0f:c2:fa:6d:94:a9:5f:0e:c4:e4:5d:ef:1f:88:
b9:74:f9:b8:cc:e4:02:0a:13:12:69:a9:36:34:e9:cd:74:4f:
74:ae:25:0f:fc:0c:27:23:0c:34:d8:e0:0f:8f:fd:02:22:85:
ce:c3:10:04:be:ad:7b:a0:a3:4d:c3:e0:05:49:93:cd:61:e1:
6b:bf:8c:12:e7:1e:0b:d5:5d:85:90:78:d9:f1:0e:9c:5d:c3:
9c:9c:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:00 2025 by rpki-client