Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier: qIin62+Si8AkU0pE6e5N3AwaEzQK8KZ4lUevtkaZtDM=
Subject key identifier: 59:B9:DB:85:A9:AE:BF:D2:D4:A5:EC:B8:E6:EC:A8:FD:55:C7:5B:70
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial: 0194BCE08D663D5C7DE58B4A558C1A09FF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number: 08FA
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: PYeHiA8fyV/cYajU/QuOMbYIUyQA3cBu5i39S+zIbVA=)
2: JufGUN7lSpZAGWjrmqtvLUWR_zI.roa (hash: Iy7o+pEYYChGs2ZCtdktx7oLzzJhBT8ccxmlI2oNeGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:66:3d:5c:7d:e5:8b:4a:55:8c:1a:09:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=59b9db85a9aebfd2d4a5ecb8e6eca8fd55c75b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:99:11:74:3b:18:d9:27:be:b8:48:24:74:
fd:7c:04:0b:ab:12:bb:34:49:73:7e:97:03:8b:75:
4d:64:96:7b:8d:00:dc:da:e1:08:3a:b3:71:c3:e4:
50:9f:9f:0e:9f:c6:1c:a6:fa:a6:f0:b7:1f:56:88:
e4:7d:0a:ca:7e:30:6a:83:9d:eb:19:b8:63:38:f9:
ae:f0:d9:e4:2a:f3:c3:81:2e:7e:f7:d1:7e:7a:88:
b3:77:d3:ad:6c:7e:3c:7f:f4:c3:62:0b:8c:22:e4:
b7:4f:40:70:ca:7b:f3:96:15:de:57:3d:c9:ea:32:
30:92:4f:c1:f6:d7:e3:c3:ca:8e:d7:23:28:21:81:
ca:3d:ea:dc:6f:c2:5d:e7:82:a6:43:36:f9:c4:3c:
8b:56:92:8f:df:d6:81:46:e5:b2:e8:49:ec:21:78:
07:bd:80:29:4b:55:eb:6c:7e:8f:aa:36:f9:9e:05:
a3:b5:48:9f:53:f8:52:7f:66:da:cd:fb:44:32:10:
e6:5f:f9:da:f1:4a:25:4b:d1:d0:21:44:c8:93:66:
f5:88:e0:c5:d5:c8:63:7d:62:fd:e9:ab:54:fe:80:
67:a2:93:1e:85:82:ed:63:f5:13:b4:08:6b:38:21:
99:9a:81:75:60:75:f4:19:12:91:af:eb:4e:20:84:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B9:DB:85:A9:AE:BF:D2:D4:A5:EC:B8:E6:EC:A8:FD:55:C7:5B:70
X509v3 Authority Key Identifier:
keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5b:0c:be:1a:51:a7:ea:c9:dc:5a:2e:b7:e3:03:cd:c6:c1:
85:22:2c:e4:16:2d:0c:49:66:c3:fb:ed:79:db:61:03:f8:c3:
e2:3b:62:8d:48:ae:a6:7d:e0:2c:1e:06:58:97:b9:3b:eb:a9:
c2:9a:5a:49:3e:b8:5b:f5:c0:68:f4:bf:2f:c8:22:73:6d:1d:
09:f2:89:ff:b4:3a:98:50:50:f0:ae:53:dc:c2:b9:af:c6:b5:
21:2b:93:0f:53:f8:1d:b0:5a:96:c8:a8:fa:0e:7f:3e:c5:32:
2e:b3:36:51:92:98:bd:48:da:ed:49:2e:d1:ec:3a:f0:85:8c:
ad:0b:15:d5:c8:99:4c:5c:d1:84:81:27:4a:eb:43:5a:5e:37:
e4:05:47:e5:a2:a1:af:ae:b4:45:b9:b1:d2:57:e9:55:88:75:
1c:ff:46:7d:53:58:39:27:18:f6:4d:2a:fc:dd:04:fe:f0:27:
d1:66:21:e0:ce:63:90:04:45:4f:62:cf:9e:ee:70:b1:9b:e7:
08:d5:29:91:c1:49:e6:0a:73:5c:bb:7d:93:74:6e:78:19:80:
b7:01:d4:2b:af:a1:1e:20:5d:0f:7a:eb:c3:4d:43:35:0b:93:
05:a9:77:44:02:3c:ca:5e:d8:d9:73:5d:f8:07:ea:08:62:a5:
12:88:fd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:37 2025 by rpki-client