Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier: hweRCoU6Q+9O5yqRg2U508QSm6fW2MYVzuorlOQQHo4=
Subject key identifier: 2B:D4:A5:77:48:90:EB:30:1F:F9:33:3C:E7:24:44:5A:02:10:C4:CB
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 0194BC05355C2267E929B4EFB5FA01BC926F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number: 04C4
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: RdGYazcblxjw10A1GXBrScv2ZUw.roa (hash: cthxVd9Tm4tHhJQTv20dl7UKI0DsMHEY2NNEIm16wNQ=)
2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: sLoLe2Bmt6PXCJBJRNTmhd3lJ5/WcN4AgyDiMNKFXR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:35:5c:22:67:e9:29:b4:ef:b5:fa:01:bc:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=2bd4a5774890eb301ff9333ce724445a0210c4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:53:c2:1a:f2:b9:9f:4d:b5:ff:2e:75:47:
a5:4a:b1:e7:1a:be:a8:03:2b:44:33:b7:0e:66:82:
b6:27:a7:59:df:18:ad:69:20:78:86:fb:48:93:81:
2f:69:3b:a3:40:aa:8f:1d:f5:65:c3:11:78:24:6a:
c4:4a:39:97:b2:d2:db:5e:a7:58:9c:f9:62:f4:52:
03:40:d8:1c:22:90:87:ed:b1:6c:29:3d:e3:0e:0e:
06:32:42:3d:e2:f1:2b:8b:0f:7b:6b:9c:cb:50:f8:
30:0e:cc:3e:86:d8:51:7a:c9:ab:5c:77:73:d4:65:
c0:5f:2d:5f:30:98:ff:ce:27:24:d1:96:41:98:42:
d4:0b:79:32:e3:74:c7:4e:9f:b0:b9:32:16:73:4c:
86:ba:b7:b8:98:d4:4f:31:bb:ed:46:01:42:1f:4f:
2a:4a:f9:49:6c:60:9d:ff:10:e7:85:c2:70:ec:09:
e3:b4:cd:b4:49:9a:f5:af:57:3e:3b:3e:a1:51:5d:
d7:f4:e4:72:34:e3:96:82:ea:8a:a4:12:d5:dd:ea:
d8:08:31:d8:d1:9c:d6:c8:cc:43:64:cb:03:04:e2:
ee:e3:82:5b:a1:80:3b:02:5d:c1:40:a6:45:d4:3d:
72:bf:3e:ee:cd:40:45:7b:44:1a:d0:69:b5:4b:c7:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:A5:77:48:90:EB:30:1F:F9:33:3C:E7:24:44:5A:02:10:C4:CB
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:47:1f:e8:44:d2:00:65:81:cd:25:77:3d:b0:4f:d8:40:28:
f5:87:96:9c:62:16:7f:d5:ec:11:54:d5:ce:5f:b7:42:3f:67:
81:f7:80:00:81:6b:3b:a3:6f:42:04:29:2a:9f:bc:f2:a5:51:
6b:7e:98:0a:b7:01:33:54:1a:51:4e:26:14:1d:8c:60:e2:48:
a7:bc:27:f1:35:aa:f1:5a:21:f4:cf:1c:9f:c1:9f:d1:65:a3:
1d:fc:98:05:74:2f:9b:09:9f:ce:55:f9:1b:81:e1:63:af:9f:
2c:cf:d8:5b:6c:fb:a9:4f:0f:bb:d9:20:04:54:80:8c:aa:ef:
79:5b:09:ab:e0:e3:f1:71:1c:1e:42:3d:d0:83:bc:75:7f:4f:
eb:5f:07:03:19:de:b4:a7:ac:10:94:56:1f:3b:d7:f0:fe:09:
4b:29:22:be:d8:b8:78:f0:94:43:e1:c0:19:58:1c:0f:76:ac:
9a:92:cb:87:90:fc:30:77:af:4c:f8:de:c0:2b:39:08:06:63:
08:9d:44:45:81:a0:05:74:d2:9e:9f:27:31:08:f9:2d:0f:6c:
85:65:de:32:a3:6b:1e:ca:ca:c8:7b:3f:23:83:31:99:1c:2f:
35:89:65:ff:72:81:18:00:9b:08:ef:c8:3e:e7:37:7e:2b:7f:
51:83:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:30 2025 by rpki-client