Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
File: plLLMsLIZpbjX5t41fGLNiYUsWg.mft (raw, json)
Hash identifier: qV2FUY/qhbjj9GH8eCKzg18wRDjIIuj1AP/l6tEkDdU=
Subject key identifier: 56:1B:94:2B:FE:24:0D:28:97:0F:1F:A5:56:F5:EB:FB:53:D5:0D:18
Authority key identifier: A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
Certificate issuer: /CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Certificate serial: 0194BCE0DA66EA95469A64D279D31F5F5A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: DfnZMzRfopEnH2bDeBKNDNamggM.roa (hash: S3Q9ApuCGqU2ZYj0uBVCO23UhtK6iRmFAcmb65wISmE=)
2: plLLMsLIZpbjX5t41fGLNiYUsWg.crl (hash: 86x5WZ5W/T9gN7UDzC5YWYlqlcqK3cwMSGPe5viMvY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:66:ea:95:46:9a:64:d2:79:d3:1f:5f:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=561b942bfe240d28970f1fa556f5ebfb53d50d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:7a:6a:2c:c8:86:7f:7d:5b:58:45:f7:34:
b4:da:8a:8a:f0:93:b0:a6:25:7b:52:4c:a9:96:f5:
22:58:82:ae:bb:95:89:20:2b:02:75:a7:21:94:3c:
f2:4b:45:d8:4d:aa:d0:17:2b:50:27:9a:0f:1c:68:
76:fe:84:be:85:37:13:d7:40:65:fc:a9:a6:8d:21:
7a:ac:72:9a:bb:44:12:af:d3:b7:a3:73:ff:ea:e6:
b6:5d:24:a5:0b:aa:7c:c0:59:6f:01:9e:b3:51:1b:
20:91:d2:71:84:b2:72:21:05:b0:2b:da:d3:96:3c:
31:f8:b1:24:eb:60:51:88:c2:43:c6:fd:3d:b0:78:
15:c0:07:fe:3d:37:d3:86:0e:db:96:17:61:d9:13:
13:91:11:91:d4:50:3b:12:fd:5d:8a:ef:f3:8a:f8:
e3:4f:8f:a6:ae:28:32:4d:29:36:87:61:28:05:a0:
b2:2b:36:1a:49:4b:a0:24:0f:96:9a:0b:90:1f:65:
e7:e9:0f:3b:e2:ff:54:e2:fe:46:64:de:76:17:eb:
cf:63:43:d7:1a:ad:9a:73:e5:5b:97:19:0c:18:81:
74:66:9f:42:98:52:ec:89:36:d7:d3:2c:4d:c4:f4:
bd:ee:50:2b:76:25:68:3a:44:aa:7b:e0:63:ec:57:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:94:2B:FE:24:0D:28:97:0F:1F:A5:56:F5:EB:FB:53:D5:0D:18
X509v3 Authority Key Identifier:
keyid:A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:71:4c:34:cf:6a:88:bb:66:ad:e0:0f:8a:cb:61:b9:ed:e8:
8a:7b:f6:01:2b:c1:43:e6:66:b6:c8:b2:e8:87:7d:68:5d:98:
32:48:3f:70:5c:8c:72:3e:1d:41:ed:2e:02:32:91:df:ed:20:
35:46:80:4e:a8:6e:ff:b6:76:65:97:ae:57:a2:16:1b:71:23:
c6:fe:33:2d:7a:49:a7:7f:55:00:c8:e4:48:d5:30:0f:6b:a5:
17:fe:b8:b5:3d:e5:7b:1a:eb:75:04:c5:a1:e6:5f:99:57:00:
24:b2:8c:67:af:a8:c8:51:a4:b9:1e:53:3e:41:05:ff:d6:a0:
48:c2:b0:21:a1:25:17:f4:8d:62:05:c8:e4:d8:0b:7f:a5:69:
e8:ca:f5:f7:32:c4:e9:8e:cf:6b:48:c7:4b:78:62:63:97:b1:
13:97:36:b5:1d:54:af:67:38:3b:8b:5d:59:7a:cf:fc:3e:5b:
be:ac:45:50:cd:44:c1:dd:84:a3:0c:fd:12:dd:71:f2:82:b0:
b0:25:87:89:17:53:9b:09:a5:0b:d5:65:b5:c8:55:a9:98:16:
86:08:cf:e8:fd:ef:4c:c8:9d:b7:a4:a5:bc:0c:17:a8:90:32:
ae:d5:fc:96:7c:d2:5c:1c:d2:20:84:be:cf:96:e3:a5:06:d2:
3d:c1:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:06 2025 by rpki-client