Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
File: INS9SZ9YSUrA6CJjtVIKLGTWR34.mft (raw, json)
Hash identifier: 2dtm+6tc1K10S/VHgZz//jRIOAh/RLGh1bilFpRvQf4=
Subject key identifier: 4C:04:F3:4B:6B:31:32:31:2F:7A:3A:D4:0A:FB:4F:BE:A0:06:68:04
Authority key identifier: 20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
Certificate issuer: /CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Certificate serial: 0194BC3BC75BF2873FD8F4A6A786A0CED53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: INS9SZ9YSUrA6CJjtVIKLGTWR34.crl (hash: SDV/aOBBfBsxXAH4OQ6ZM86vnhRPRaEZIfF/85xDC40=)
2: h_lcjhsZRd-WoNkwUeJTA-cn-HU.roa (hash: MoTuYke9XnON66W6lzgS1xcgPTaCQPNgcBaF3y/k338=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:5b:f2:87:3f:d8:f4:a6:a7:86:a0:ce:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4bd499f58494ac0e82263b5520a2c64d6477e
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=4c04f34b6b3132312f7a3ad40afb4fbea0066804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:e6:9c:ab:75:ff:b4:62:53:9c:47:03:eb:
e8:53:c6:74:6b:47:56:7a:45:47:19:21:34:d0:c6:
2b:8a:08:4b:af:4d:31:c8:d4:f4:84:6e:b4:2f:3f:
97:3a:ca:60:65:ca:3e:9e:f4:46:e3:68:ec:97:ca:
16:11:d8:63:e0:0f:c3:bf:e7:9b:5b:89:2f:e1:4b:
25:ff:91:91:8a:d5:8f:ab:c2:ec:c3:fd:a6:95:a8:
b9:19:8c:87:48:34:2c:a5:95:39:08:bf:54:6d:4c:
d7:9d:c3:c4:04:87:e4:d2:36:db:31:d7:c9:d1:46:
9e:a0:df:59:07:13:03:92:94:b9:2f:e2:44:b5:70:
eb:1b:82:24:f2:e7:88:bb:38:bf:c1:07:bc:00:7a:
a8:32:c0:93:af:30:5a:c3:be:a6:e0:38:01:78:15:
fc:33:12:22:b4:5f:d0:a8:74:84:dc:3f:d5:df:dd:
88:4a:99:91:63:16:75:0a:e7:0a:f7:ea:37:ea:3f:
4f:61:6a:62:48:84:33:05:22:62:3e:f6:b5:1d:92:
8a:f5:50:c2:c9:d7:b7:29:c6:cf:d5:a6:4d:93:7f:
2b:9a:2d:6e:54:da:65:91:87:e6:3a:5e:b2:12:34:
e2:ef:0e:ea:fd:a9:85:c2:65:03:68:96:16:23:56:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:04:F3:4B:6B:31:32:31:2F:7A:3A:D4:0A:FB:4F:BE:A0:06:68:04
X509v3 Authority Key Identifier:
keyid:20:D4:BD:49:9F:58:49:4A:C0:E8:22:63:B5:52:0A:2C:64:D6:47:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INS9SZ9YSUrA6CJjtVIKLGTWR34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/af601e-c2bf-4a6a-aa32-d2ee15399d06/1/INS9SZ9YSUrA6CJjtVIKLGTWR34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:70:d5:32:b8:31:b3:8e:22:9a:fb:58:8c:14:58:74:ec:0e:
ce:c4:a6:ca:b5:0d:5b:9a:b1:1f:5c:ac:44:b7:b8:1f:7a:98:
4c:cb:e9:75:e2:27:e6:69:16:04:a6:ff:54:8b:b1:6e:5f:5e:
51:ea:65:ef:6a:31:fc:59:3b:2b:52:ab:ce:bb:af:22:5a:03:
02:67:fb:73:09:eb:b7:e5:b0:28:42:c5:b7:65:8b:86:fa:2c:
26:b8:de:15:19:9b:31:2b:2b:4f:ae:b2:73:ed:9a:f2:45:d6:
44:e4:22:db:5c:ef:c3:ca:0c:69:de:7d:ce:35:71:45:a2:e7:
ed:53:52:40:1d:52:50:0b:29:31:10:1a:29:1c:3b:09:b7:4c:
48:06:cd:de:62:e5:0c:7d:b6:3d:11:86:0e:32:ea:e6:34:45:
5f:f0:38:32:23:c4:a8:c6:68:f0:07:88:91:fb:81:d8:37:1a:
61:2d:9f:52:88:b3:f8:a6:da:dd:31:25:6e:dd:c0:00:cd:0f:
57:0e:62:bb:40:45:3f:3c:9b:59:c5:1f:f7:62:9e:83:fa:06:
5a:70:60:70:1a:35:8b:a4:de:0f:97:f2:15:72:a9:90:c1:a5:
c4:5a:f9:d7:cf:bc:bb:83:8b:1a:2b:16:6a:5c:5c:8c:27:ed:
b0:ec:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:07 2025 by rpki-client