Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: I+CRA6TMnB2GIa8+EkmcFD+qae2vlrtPxdFWHSIEp/E=
Subject key identifier: 4D:E2:71:BE:4C:D3:81:4B:74:E0:C2:ED:C2:56:49:71:F5:8F:98:E4
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 0194BCE0AB2DA89F2C9B6C665653DBF55FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (hash: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: hXfjwnfddN4T0nWYJV2l87R8dRIsZsN9NO67Ay2oEto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:2d:a8:9f:2c:9b:6c:66:56:53:db:f5:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=4de271be4cd3814b74e0c2edc2564971f58f98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:d3:60:92:00:c3:88:da:c2:22:c9:78:10:
68:8c:ba:8a:cd:e1:47:6e:64:53:eb:af:a1:49:ff:
ea:f7:fb:b9:9a:9e:95:39:16:c6:59:8f:92:b8:05:
36:dc:19:19:c1:84:3f:5d:4f:43:8b:69:14:4c:55:
db:7d:b5:68:7b:25:2b:8c:73:16:46:76:43:aa:35:
70:6f:bd:40:45:02:15:2f:58:cc:ab:e7:ab:0b:0d:
bf:de:1a:34:54:a0:53:fb:c1:98:c0:ac:ad:47:81:
57:ee:be:d7:64:cd:56:0f:a3:bf:cf:00:7b:1f:6d:
da:0d:39:82:e0:f8:e6:b4:1c:2f:65:4c:47:70:79:
9a:e9:c8:03:af:ad:14:8a:1c:c2:62:f0:5d:da:02:
42:16:f1:36:88:ac:19:23:e0:ca:a9:9d:ba:47:9a:
f7:01:d7:f9:5d:47:13:47:97:b6:9f:ea:38:ed:3b:
77:c8:07:41:bf:2c:62:48:19:1a:85:1a:1e:38:ce:
5a:bb:92:2a:53:4c:a4:e6:3b:0f:ec:e6:6a:60:5f:
c2:66:e4:e0:82:45:28:00:f5:5e:61:de:f0:1b:c5:
c9:00:42:6d:0f:2c:48:e0:e7:e9:80:d8:4c:9f:7c:
00:63:c4:33:4d:5c:76:74:87:29:44:16:7b:64:dc:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E2:71:BE:4C:D3:81:4B:74:E0:C2:ED:C2:56:49:71:F5:8F:98:E4
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:87:15:5d:99:f7:e9:75:31:33:6a:fe:5f:2c:d9:b5:d2:59:
30:1d:11:4c:e8:06:55:9b:03:1f:1a:03:83:d3:68:7b:58:fe:
45:b8:98:7f:e1:d2:ef:c2:a7:19:38:49:3b:2f:0d:7d:60:6b:
de:8a:be:df:63:2e:92:62:f2:7f:e4:fb:f8:15:0e:a6:65:8f:
bf:3b:be:cd:6d:dc:9e:89:19:27:1e:19:6a:de:d8:f2:f8:c2:
e1:23:62:99:a5:47:e3:29:04:3e:a7:08:ea:64:11:57:20:dc:
f0:af:06:a8:8e:cf:f9:64:49:84:27:bc:d6:e9:74:f6:99:82:
4c:32:85:12:f0:be:52:c7:96:20:f9:53:a5:bc:67:00:52:aa:
1c:02:a2:5f:43:7d:cf:96:92:ea:a1:c6:f3:d5:83:a2:88:17:
0f:e7:88:5d:2b:15:a8:57:54:42:0b:a6:03:9f:4a:fc:ae:46:
a1:09:61:3e:d9:19:07:3d:ff:b8:c4:c8:b3:13:35:ec:73:a9:
0c:ce:99:42:bf:79:39:ac:3b:ed:4b:0d:cc:83:18:e5:c5:f2:
0a:f6:45:e8:33:16:c0:30:ad:5c:ee:54:06:ab:dc:10:6b:61:
a2:8e:36:43:b8:1b:50:4a:a9:07:eb:3e:1c:2c:c7:ce:9c:dd:
c0:d6:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:40 2025 by rpki-client