Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
File: _u3yFAZ0rm_z5GRWDElWq24hre4.mft (raw, json)
Hash identifier: GIuxuBZCP5+acoJmNYRLzJzjN6uv7uRnw5JtToxRxnU=
Subject key identifier: BA:8E:2E:86:19:5A:56:F9:1B:E4:40:3B:3A:FC:62:BC:A7:57:84:A1
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 0194BD178FFD2CF2F271BAF65FC4F893C712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
Manifest number: 0875
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: M58q90VZFeP3jvyPYnq7UDFhR3E.roa (hash: pfDDAToaRStBIBYW01WrjbiSm0zCrXjT/V6YwQttWeY=)
2: _u3yFAZ0rm_z5GRWDElWq24hre4.crl (hash: 69HDKjamcDUo0/h2endA7zLQ9IlZ+b5bDmMLHXafVS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:fd:2c:f2:f2:71:ba:f6:5f:c4:f8:93:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=ba8e2e86195a56f91be4403b3afc62bca75784a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:f7:be:4b:99:8b:1a:7d:fa:0b:4c:6b:91:
5a:94:fe:86:34:b7:ce:de:9d:6f:db:3a:fe:2b:fe:
88:61:11:9a:1d:18:c5:48:e4:e0:ec:8e:4d:62:75:
04:54:56:c4:a8:84:70:a4:d0:1d:00:1b:9d:c3:2d:
7c:50:5b:c1:06:f0:de:e8:d5:59:42:16:df:ee:5e:
bd:5f:09:2a:34:e3:e3:ad:26:7a:eb:be:b2:12:1a:
a0:0c:42:28:b1:ad:ab:b1:1a:cc:a0:95:e3:e0:92:
7b:7c:f4:25:c3:d2:38:a9:5c:83:d0:34:e2:51:6f:
19:f9:e5:da:f6:05:71:04:2a:d1:66:c4:03:c3:a2:
d8:0a:65:d5:e9:85:6d:f5:4c:1b:9e:b3:a4:89:07:
6c:0e:05:d0:9e:41:34:48:8e:92:43:46:48:5d:ad:
a8:e8:73:78:c6:44:b4:59:12:08:92:02:44:bc:63:
05:e8:84:b6:9a:61:2a:1d:14:bc:2d:1c:31:55:14:
3c:17:68:ca:e3:64:57:2d:eb:14:c7:9c:ac:71:98:
5d:52:68:b4:af:b9:3c:48:71:aa:89:65:61:60:f4:
3b:ba:60:e4:54:c5:c3:46:9f:16:f0:7d:4c:88:cc:
00:79:10:97:98:7f:be:e6:15:87:ec:49:03:9b:bb:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:2E:86:19:5A:56:F9:1B:E4:40:3B:3A:FC:62:BC:A7:57:84:A1
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:63:94:de:8c:0b:1b:4c:97:27:79:d7:66:02:ec:82:28:18:
70:a1:0f:5c:4d:3e:21:48:97:8a:c7:f5:f0:99:c3:e4:dc:d6:
49:1e:d4:42:33:8a:3a:cb:58:f1:a7:0b:eb:7a:26:42:d9:7d:
65:9a:8a:b8:42:3a:8e:64:8b:ef:af:91:87:f1:1d:d7:f3:1a:
e1:6f:c5:26:ae:12:a2:2f:f8:73:3e:37:f2:d4:0b:07:ad:25:
ef:73:43:a7:ca:30:95:b7:9c:52:b7:05:b1:f7:d8:d3:e9:58:
08:93:ff:98:50:e1:b0:83:f9:d6:b2:f8:3b:46:9b:f4:12:e8:
d1:8f:50:74:5c:08:0c:23:0a:83:2e:b8:df:52:e5:60:a2:b2:
20:26:f0:8a:5c:b4:7f:df:0a:c0:36:4b:c0:83:34:7c:f4:ab:
1a:68:0e:2a:57:cd:00:58:d7:f5:67:98:48:fd:ef:ae:be:69:
d4:b6:fb:93:82:63:8c:fc:0e:2d:33:d9:45:a7:4f:51:24:de:
7f:25:e9:95:ed:14:f9:e9:19:3e:48:fb:93:b1:f4:f0:17:b8:
65:fa:3a:a8:e8:2e:ec:ca:84:b2:d9:fe:5e:08:da:60:a3:ba:
60:73:9d:82:81:b6:48:67:dd:9b:a6:ee:06:c2:14:b9:d7:fc:
b7:cd:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client