Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File: 6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier: jUSiXLdY8VlOX/rsL2hhgJyblHaFdGGhZoGv9s7Eqt0=
Subject key identifier: CA:13:F1:3B:9C:AF:CC:A0:E7:92:16:BE:C3:0D:8F:01:67:91:76:C2
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 0194BCE0E3C9E8A357210F82911E9A979E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: tCDozCHZNOCJEIv/kSu5fxDBdLvD7V2GJkqNZe/sekQ=)
2: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:c9:e8:a3:57:21:0f:82:91:1e:9a:97:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=ca13f13b9cafcca0e79216bec30d8f01679176c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:ad:10:69:62:58:b0:1a:75:f4:45:c5:b4:
e5:d6:92:5d:05:0c:cc:f6:63:09:f8:f4:bf:29:21:
3f:4d:97:ec:a8:b5:95:a3:3f:44:d6:56:01:27:5c:
12:81:81:e5:db:9f:67:ac:09:3a:2d:84:03:10:af:
9b:c3:5b:cf:33:b4:af:3d:28:a0:21:ce:1c:29:15:
3f:f2:24:d1:12:0f:eb:1b:de:9f:f7:ea:2f:b1:f0:
24:35:40:09:e7:de:4c:ea:83:b1:62:2b:06:0b:ea:
b8:41:b7:e9:2c:c4:5c:6d:df:5b:d5:75:db:e6:be:
a9:f9:8e:7f:20:68:4e:ed:d5:2d:aa:15:d5:2d:fd:
ec:ef:d2:a9:bb:5b:0b:44:fe:b6:37:d7:ee:33:9a:
1a:4e:0b:f4:f0:e8:88:fe:fc:af:61:f3:a4:3a:e4:
2c:fe:f3:f7:ff:c9:f8:b7:b5:4d:e0:31:6a:93:ea:
89:2e:0d:22:e1:32:c3:12:17:e3:a5:74:7d:82:36:
35:e8:80:a4:0d:12:94:45:ae:d0:66:e0:81:6d:3a:
80:db:c6:68:7e:ad:f3:1b:d3:09:a2:bf:33:a8:51:
8f:c9:6c:d1:41:94:8e:f1:8c:5e:d6:69:f7:17:98:
bf:82:d6:5d:ad:1e:fb:e5:b9:23:60:23:21:eb:12:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:13:F1:3B:9C:AF:CC:A0:E7:92:16:BE:C3:0D:8F:01:67:91:76:C2
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:67:5b:2b:43:ea:aa:ee:97:23:88:46:2e:b7:ac:80:4b:21:
fa:5c:a6:60:0f:9e:c8:c7:9f:73:00:74:06:a2:2a:99:19:fd:
43:00:07:72:3e:ee:a5:e0:40:74:75:30:d1:24:f4:2b:a5:4c:
c1:12:34:c2:cc:f0:07:ef:c3:07:7c:90:fa:07:8a:8b:ef:72:
14:e2:19:0a:ef:ff:60:f5:43:94:e6:1c:98:d1:73:5d:91:03:
63:74:37:96:82:da:ff:71:60:0f:10:e1:56:da:3d:4f:ef:ca:
19:93:c2:21:25:e8:5b:c5:7b:ea:80:c1:bc:1c:0f:42:fd:b1:
e1:34:14:55:fe:4d:d4:8c:04:3e:e0:c6:b4:c6:21:54:c5:54:
90:a9:68:49:93:8c:00:b8:7c:83:92:c4:c3:65:82:28:1d:b7:
0e:37:2d:9c:99:8b:37:67:a5:b2:ef:8f:a2:01:61:f1:ae:8d:
95:f7:1c:1e:64:d8:8e:d7:e4:de:43:48:ad:40:77:da:d9:bc:
6e:db:d9:26:29:b1:ca:e4:f7:d8:55:b6:d2:f0:b4:16:66:57:
70:35:1c:9a:fe:2e:91:aa:34:f3:a1:d9:c5:99:2a:09:3d:77:
01:78:62:0a:29:1b:86:8d:3a:ec:d9:7f:0a:0f:64:8d:3c:f8:
30:5c:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client