Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: y4fb+PMaQzmGGNCj5kcb4wpGiNrf4siiWqaKri+S+/8=
Subject key identifier: 10:AC:F9:A5:D7:E5:C2:FA:D2:CB:3C:6B:1F:16:F4:49:BC:52:EB:1E
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 0194BC3C5BCFD8CC2A994221B61DBA5522FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 0E60
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: qfxToxuKQzkuKyp/Hu9PXPj18DQ9xiAb3Fdr9mZyces=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:cf:d8:cc:2a:99:42:21:b6:1d:ba:55:22:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=10acf9a5d7e5c2fad2cb3c6b1f16f449bc52eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:41:dd:92:61:ef:d6:bf:c4:10:c9:11:73:
a0:51:5f:23:46:22:81:31:60:d3:a3:c3:79:c1:78:
06:ad:d1:ae:9d:5c:df:ad:46:74:a4:c4:c3:22:3a:
c1:be:49:07:e8:58:22:94:3a:86:39:63:d1:38:0d:
f5:61:88:b3:0c:c0:0a:63:a4:37:48:a3:3e:e6:9f:
2a:7b:91:95:26:9e:e7:9d:ce:d8:fd:1d:80:1e:22:
6a:ed:e6:17:a4:69:b2:86:b9:03:c2:8e:58:ff:8d:
b6:f7:3b:a7:de:b0:75:ae:38:2b:6e:b2:52:5e:3d:
cf:32:d1:71:fc:f5:52:e0:72:99:d6:6a:2d:a1:21:
31:d9:f8:5f:ca:77:e2:71:9f:63:7c:1a:9b:24:5d:
b9:01:b7:98:c7:ec:4d:48:43:89:f2:6b:26:86:cc:
a5:a2:ab:74:e3:33:df:c3:22:9f:f1:df:53:fd:e7:
73:ab:f7:83:92:d8:b5:80:d3:0f:c7:d4:1b:56:1e:
b8:a8:4e:29:e3:7a:c5:32:9c:29:c0:f6:85:31:3b:
2c:a4:a9:ad:83:7d:7c:a4:34:dc:b4:b1:8b:be:29:
e5:fa:3d:e2:38:77:2b:57:7a:1d:25:f9:6e:c8:de:
31:97:32:54:66:fd:bc:40:42:01:19:90:83:e8:55:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:F9:A5:D7:E5:C2:FA:D2:CB:3C:6B:1F:16:F4:49:BC:52:EB:1E
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f8:d8:4f:e8:bc:e3:d6:33:92:d4:05:5a:5e:25:c0:dc:69:
e1:75:8e:4e:7e:e7:87:16:2c:20:42:c2:72:7c:34:90:a9:18:
16:6f:2f:1b:09:5c:fb:41:62:bf:d6:19:c9:ae:29:cf:19:2c:
e3:57:3f:04:de:81:6b:1b:ca:86:d0:66:77:91:b8:88:9b:c6:
55:52:f2:8b:35:3e:d5:93:aa:73:7a:4c:d3:72:ca:15:53:86:
5b:ec:f0:34:ad:97:e1:86:59:9e:88:23:30:a0:bc:64:87:ac:
86:4e:69:4e:b2:4d:42:d9:45:d5:56:07:57:59:25:88:d2:ec:
dc:a2:74:eb:8c:ac:30:f4:19:30:db:3c:48:b1:6c:7b:c7:25:
62:46:f8:d5:c5:a0:0d:75:64:98:a3:4d:f2:1d:8c:ba:ad:95:
55:1c:3a:40:25:6f:8b:e6:a4:21:9f:c6:11:01:36:2b:5d:4d:
ed:d5:f7:73:42:30:e6:b9:e0:e1:4b:bc:ed:be:0e:61:6f:c8:
eb:4d:45:40:20:ea:6e:d2:7a:a3:16:44:11:b2:b7:9d:6b:47:
7f:5f:9f:4f:29:94:ce:b0:61:eb:87:79:0f:b2:55:01:76:2f:
94:19:03:8d:88:c2:08:f9:04:13:31:8e:29:bd:dd:13:1c:e3:
27:d7:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:44 2025 by rpki-client