Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: r5kfxMbbTAAa9wodd0+oqy48RwAvXz7wnbNTjvjG6uo=
Subject key identifier: D8:7E:57:76:E6:59:61:17:2C:69:C4:6E:DF:5F:0B:D3:34:34:7D:5A
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 0194BC72C59F43FF31396A2A3579218012CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: 27hLF7TkULUoLzpK5QN+PcjISCYYy58hEI7Xvy8vzyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c5:9f:43:ff:31:39:6a:2a:35:79:21:80:12:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=d87e5776e65961172c69c46edf5f0bd334347d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:f2:15:97:07:61:78:84:10:1e:e3:75:cb:
85:30:9b:14:6f:fb:44:36:c4:6a:c2:12:37:39:d6:
e4:5a:f1:c6:10:4b:bd:cc:c2:d7:a9:9a:3e:17:ee:
c7:b9:58:14:ab:a5:96:8b:c3:8a:35:9d:63:73:6b:
7d:59:5d:9a:ae:ec:b3:04:20:c4:24:d8:4f:27:7f:
7b:86:41:ec:30:64:22:4c:02:20:7e:e5:1a:d2:48:
43:be:7b:b8:62:52:bd:3e:ff:46:fb:56:20:4f:d0:
30:15:8d:84:1d:49:13:f2:7f:47:43:cf:d4:a5:00:
6d:86:ca:a9:1e:25:bd:03:1e:7a:e8:f7:f1:b6:65:
a4:8f:6f:44:31:f6:e0:2a:9a:bd:d4:91:31:a3:3e:
96:82:af:f6:8b:65:dc:95:a3:5e:bf:d6:04:97:23:
40:ed:72:95:6d:30:07:55:10:0b:7d:aa:1d:c9:bf:
21:30:f5:35:8b:8f:de:3d:44:c6:cd:d2:5d:2e:9b:
ec:2b:8e:c0:15:dd:47:f1:87:d8:68:b6:18:f1:68:
99:03:cc:dd:f4:f4:98:76:d9:dc:a4:9f:a5:cc:71:
5c:24:c6:66:6b:9d:29:5f:ce:ba:70:93:ba:6b:0c:
dd:5e:28:aa:14:33:dc:53:e2:ee:19:c7:f9:5f:a7:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:57:76:E6:59:61:17:2C:69:C4:6E:DF:5F:0B:D3:34:34:7D:5A
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ef:83:ae:a7:f6:c1:b4:f6:88:32:a7:15:cb:1c:56:b4:fa:
f1:c9:0b:b2:fd:bb:d1:d6:39:3b:7a:28:ef:97:32:f6:14:eb:
eb:c1:b8:e1:74:8d:c5:85:cf:bf:57:8e:15:2c:f4:92:fa:49:
49:d3:77:78:f7:e8:4f:f3:da:1e:b2:19:f6:9b:5c:dd:b4:df:
f8:b8:d8:81:e2:36:b3:26:c3:44:d7:bd:05:6b:06:40:95:f3:
8c:5f:d1:15:30:ae:37:99:d2:1b:51:6d:e7:bf:4c:9f:e4:4e:
8f:87:b4:68:47:ed:b0:d4:bc:69:03:27:db:b9:09:7a:cc:d4:
46:20:80:30:2a:ce:57:bb:4d:7a:ad:f4:68:fa:58:1f:b9:0e:
aa:1b:0d:b0:8d:cb:0c:c3:cd:08:3a:3e:9b:54:96:5b:c3:02:
65:1d:d9:eb:b3:2e:36:9f:ec:89:a1:cc:91:90:03:68:a9:e0:
72:53:72:1a:7a:a7:f5:84:a6:07:9f:e8:03:fc:32:94:26:df:
7f:74:41:f3:43:00:a8:90:90:5a:bf:ba:e0:61:d9:67:b5:42:
6b:27:7f:16:c3:e4:7e:f9:6a:8b:b2:45:ec:f0:b7:3c:66:bc:
55:9c:2f:07:00:ce:35:39:15:9a:97:e1:e7:fd:73:da:15:90:
33:05:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:30 2025 by rpki-client