Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: zQL145yyZ/5pi8Xpr0QdDfaW4tCLApUJbIIbAqQiYts=
Subject key identifier: C4:C0:63:92:46:ED:3C:13:26:87:A9:0A:E7:B0:BC:F2:22:70:B8:45
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 0194BCA977857331F7BDBD53ED56F1AE4A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 1166
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: o6lm8aDKiMowKbvaD/32l+t3bjhlIshOGPfYnA5YgwU=)
2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:77:85:73:31:f7:bd:bd:53:ed:56:f1:ae:4a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=c4c0639246ed3c132687a90ae7b0bcf22270b845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:31:a3:69:8a:0a:e1:94:0e:22:a0:14:e0:
76:f3:fe:0d:03:18:fa:d7:e4:cc:44:84:2b:07:9b:
f0:1d:8c:0d:d2:6b:78:7b:1d:3b:66:7d:82:13:76:
7b:a0:60:e9:0a:03:95:a4:25:6d:45:9c:4a:f0:7a:
53:62:d7:72:a8:35:1a:f9:9f:eb:05:88:a2:31:b8:
b1:97:bc:3c:c2:f2:0d:19:5a:52:3c:6d:c1:78:d2:
36:eb:5e:52:d7:43:c6:ae:5e:15:83:6a:17:08:e9:
3b:f4:bb:41:03:0c:95:1f:1c:ce:a1:2c:31:67:7e:
93:45:97:17:f1:27:f0:be:9c:c8:db:66:0d:ac:f5:
a7:c0:f7:3c:01:e1:2d:68:56:0f:44:25:d6:2a:92:
84:a8:e4:73:0c:80:2a:c7:2a:37:74:76:63:79:e6:
77:9d:ec:52:ed:a6:91:02:93:f2:b0:42:5c:0b:6e:
c6:b2:2d:17:b9:2c:c0:27:5b:d8:c7:e0:60:39:0e:
58:35:ab:11:67:c6:2b:10:36:7c:01:9a:7c:a7:19:
d2:7c:eb:9f:29:9a:3a:28:28:7d:bf:5d:7b:d2:cb:
6a:54:6b:ec:79:8f:43:f7:18:2d:e0:0a:3e:b4:89:
6f:42:46:c7:93:d0:f5:b4:27:b4:2a:4a:88:fa:37:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C0:63:92:46:ED:3C:13:26:87:A9:0A:E7:B0:BC:F2:22:70:B8:45
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:11:4c:ba:3e:43:93:b8:ed:c7:18:d8:5c:c3:17:24:2f:
e3:1f:21:0e:a4:a2:ff:5e:6e:ca:50:e8:44:7f:58:44:76:1d:
f1:58:1d:ca:b0:7d:3d:a7:bf:cf:f4:c1:af:68:b0:c8:84:d3:
8c:fc:3a:cd:ae:85:aa:9c:14:15:06:53:0e:62:be:5b:ba:a7:
cd:5c:22:e3:07:fc:c5:28:59:b6:9c:d4:72:13:53:ae:1e:ef:
86:8b:e0:1b:80:39:cb:1a:5c:65:96:30:7e:88:07:84:e4:d0:
24:a0:02:20:35:d8:94:f5:24:f3:71:32:fc:89:e7:ce:b9:43:
00:3b:97:bc:1d:ac:5c:44:70:cf:27:cc:49:f6:98:3c:64:7c:
33:32:cc:45:b0:6f:4e:cb:61:0b:7f:04:e3:66:69:66:1f:55:
2b:77:a6:13:c2:99:c1:44:d7:b8:0e:17:30:89:5f:b6:34:16:
3e:09:04:6f:08:d9:1d:ae:f4:c3:a2:bd:52:39:c8:e5:17:bf:
ce:4e:eb:1c:95:a7:81:cc:c8:74:eb:20:36:9b:44:82:ec:ce:
ae:4e:84:3b:9d:8a:3c:c8:a6:c2:b4:ed:fb:07:b6:9d:f5:70:
56:99:44:cf:7d:f9:01:46:2b:70:d7:73:c0:44:4c:b4:25:4e:
80:8d:3e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:20 2025 by rpki-client