Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File: 81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier: BVy+y7XJt8mi2Ou29V1YTaMM8iKbrzA5g6xiINk9D1o=
Subject key identifier: B3:19:20:82:C2:F8:F9:17:EC:0B:D6:31:45:2F:94:8B:34:62:37:DE
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial: 0194BCE0ABFBCEEE32A64F56300BA075CD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number: 04AE
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: sxSiRocAJ2+9dtKqHMPQRaSwUBcxuYVywD/E6t0cbPo=)
2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:fb:ce:ee:32:a6:4f:56:30:0b:a0:75:cd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=b3192082c2f8f917ec0bd631452f948b346237de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:7e:df:bd:af:aa:1c:16:ac:80:28:76:c7:
8f:32:0b:11:89:88:af:ee:29:0e:0a:fe:7e:6b:86:
80:56:bf:64:68:35:c6:94:5b:62:8c:37:a3:60:d2:
31:9b:b4:d2:c9:0d:9a:80:af:04:23:4d:4b:7c:09:
3a:4b:94:f5:2d:4e:27:79:57:06:3f:8d:fe:82:49:
bd:cf:bd:fd:7f:72:94:43:a1:2d:bf:cc:61:2a:a5:
a4:97:f4:40:3b:79:e7:61:f7:79:29:37:62:8a:ef:
3c:9e:1a:f5:07:70:e5:36:4e:21:44:17:54:df:1a:
ec:20:55:a6:89:57:38:76:7e:29:ef:12:29:8c:a2:
e7:f3:97:6a:74:f3:95:a1:08:ee:f4:86:f7:6f:8e:
39:aa:cd:42:c5:a1:f0:79:9c:ea:97:3d:be:c6:86:
29:cf:89:7a:ba:87:97:32:cd:99:c0:90:ae:0e:6e:
52:9c:9e:ab:f5:3b:dd:bf:43:0c:8f:6e:65:20:78:
85:f2:ff:e4:9c:3f:dc:bb:f4:10:02:ae:55:3b:18:
63:08:37:38:1e:e2:4e:0c:79:16:a3:1f:55:a4:36:
42:65:7e:5b:ce:08:33:d4:71:74:9a:97:dc:35:da:
fb:8f:9f:22:06:b4:6d:89:12:e4:f6:79:7b:38:f4:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:19:20:82:C2:F8:F9:17:EC:0B:D6:31:45:2F:94:8B:34:62:37:DE
X509v3 Authority Key Identifier:
keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:fe:3f:d0:4f:af:91:3c:5d:c9:42:2a:3a:a3:ab:83:02:
48:37:c2:11:4e:04:4e:f6:60:6d:16:a9:f8:70:72:cf:97:b3:
a9:21:38:8e:32:52:1f:33:6c:09:eb:8c:47:5d:48:e3:87:3a:
bb:7e:13:d1:a3:b6:48:40:84:6a:35:bb:b3:14:af:e6:10:c7:
3c:27:b6:61:e7:36:02:d7:f7:e9:8b:9c:5a:f4:39:b3:23:85:
11:d6:76:17:0b:2d:32:a7:27:2d:c3:6e:3c:1d:6e:2b:84:b8:
ba:8b:8c:b3:4b:71:d7:41:89:e7:10:77:a0:54:01:af:5e:67:
2e:42:51:fa:46:71:1b:0d:14:99:b7:83:68:30:d3:c9:13:16:
f8:56:e1:33:d4:64:ca:79:c9:87:fb:3f:91:fe:f4:93:58:3d:
d2:54:b6:0f:62:ed:33:8a:4b:c5:dd:ee:88:db:18:7a:c1:f5:
f8:d8:04:54:a3:93:cb:71:4b:b7:9a:24:2e:17:57:65:e7:1a:
a1:6a:0e:32:c8:34:9b:19:9f:ed:12:e2:40:b1:5a:c7:9d:6c:
8a:65:2f:98:74:18:34:f3:b7:b2:45:7d:62:7f:d7:11:36:1f:
4e:e7:75:53:4d:c2:0c:ba:d9:88:b4:3a:e1:9c:b4:b3:4d:1e:
e5:18:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:59 2025 by rpki-client