Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: FBE/c26WZ7mH/nP9Po8u7/t6s+Vi4M6ie81JbsQmtMk=
Subject key identifier: C0:D3:01:CF:0A:61:C8:DA:BE:A8:C2:8B:A2:D7:04:41:D1:C0:F3:E0
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 0194BD4E502071790DEF0965CC3D44EB00EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0455
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
2: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 6oA2Ta2uvMOdY455ikl5xi/hSxAyPfCewPt9UG4eRfM=)
3: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
4: oycqR76Bjf7qno3anV7JfzPWPvs.roa (hash: /8bYsUu2fyo4NfAsatKvD7BcUmMFAFcwA/6gm37Z/8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:50:20:71:79:0d:ef:09:65:cc:3d:44:eb:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=c0d301cf0a61c8dabea8c28ba2d70441d1c0f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:ad:4c:04:14:5d:83:a3:47:d0:94:d7:08:
6b:c8:93:c3:4c:55:43:9d:8d:71:7b:fe:a2:1c:57:
6f:7e:85:51:82:ce:f4:5a:8d:35:2c:fb:97:0d:ff:
00:ab:52:e4:e2:64:23:86:e1:a3:b7:f5:e4:60:d8:
a6:59:d1:b6:03:e1:bf:40:b8:cf:9c:16:a0:4b:5f:
61:03:07:cd:7e:a2:e8:98:b4:cf:d3:70:89:3c:16:
7c:8f:c1:f6:fc:af:8c:af:35:51:ea:fb:da:c9:7a:
23:52:32:5e:39:aa:15:32:a2:f2:0e:57:4f:b3:cb:
d2:e5:b1:4b:f0:43:24:84:90:82:08:2e:75:28:ab:
b7:eb:09:da:3b:01:a0:a8:2f:cd:0e:2c:61:1c:c0:
ad:14:06:56:20:f2:4e:75:7f:55:0b:43:c5:8a:57:
d9:09:7a:27:c5:4a:e8:d8:d2:8b:54:8f:88:4f:fe:
85:87:77:e0:20:e1:eb:a2:33:82:0e:09:15:9b:08:
e9:90:3d:b1:f4:81:fb:c2:1f:19:e5:d0:43:7e:1f:
61:14:17:58:fc:43:51:77:5b:cf:86:37:3f:83:21:
fb:c7:7b:54:90:14:6a:27:a0:6b:a7:0b:a8:7f:0b:
ea:fb:db:50:fa:18:a7:d4:d4:ad:ad:b7:7e:c4:22:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:01:CF:0A:61:C8:DA:BE:A8:C2:8B:A2:D7:04:41:D1:C0:F3:E0
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4b:9d:07:83:b0:c7:6e:88:c2:de:1f:6f:bb:45:dc:cf:44:
c7:9e:58:37:20:94:07:46:80:28:aa:2c:5a:b7:41:61:92:1f:
57:e1:a6:80:84:2b:54:24:89:a8:bb:34:7e:86:93:66:12:f9:
23:7a:d1:fd:25:63:5e:3e:c2:82:74:cf:4c:54:ab:2e:9b:09:
7d:14:dd:cf:bd:4f:e4:aa:0a:f0:ad:9c:27:72:46:a9:b2:88:
fb:c8:44:92:e1:53:67:60:2d:bb:cf:88:71:44:0a:56:d7:41:
5d:77:9b:21:13:88:96:0a:98:ac:43:67:95:ea:62:b4:c9:f0:
23:d8:a2:b0:7c:72:0d:f7:69:0d:95:b5:a8:4f:4c:b6:29:4f:
da:dc:9f:6a:96:2b:b5:9c:72:0c:8f:5a:08:9d:eb:f7:7c:38:
14:a9:ac:f9:80:d1:04:fa:aa:9e:7e:2e:80:13:3e:f5:7a:db:
6d:43:20:77:bb:4c:54:1f:e7:d6:92:f0:25:06:70:3c:70:8a:
da:9b:f7:91:af:40:65:01:38:f9:b4:bf:6c:ba:49:9d:b3:47:
d1:42:98:56:92:cb:9d:d5:1d:c2:f9:1b:d3:97:4a:45:d8:60:
3c:f4:3b:e5:0a:b4:18:d1:c1:9e:8d:12:2e:e1:35:02:08:8b:
7f:1a:c2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:47 2025 by rpki-client