Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File: R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier: LkSNtR79OteLtl2eorvnE09F2+2smmBHugsTLpKKnFg=
Subject key identifier: 13:AB:D0:0E:83:97:95:9C:8C:3E:68:E5:D3:B2:14:BD:28:3D:28:CD
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial: 0194BC04B004F519E8D19B414C320D7D3BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: QXSM-tWrPmeWBheSqnXnaDNQmDc.roa (hash: x9yXB+eo0EInUWHjOj6vjP2I3KVEdKt4v4+AdmEQgDw=)
2: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: aQShQ6le6c2TP8gZRlrWkFuoibiVmdbgNXtYYjSkzXg=)
3: XKLo22yCHGXk836_NiS1tUu23bU.roa (hash: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=)
4: uw2WshwMtLO2FcZuN7xWhCinB_8.roa (hash: nkzSgxMXHvVYjALA+QY3vWMG5LDK/rRtbKYXv80gFxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b0:04:f5:19:e8:d1:9b:41:4c:32:0d:7d:3b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=13abd00e8397959c8c3e68e5d3b214bd283d28cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:46:12:87:f0:f3:bc:82:04:dc:29:4b:2c:
a6:28:9b:9a:7c:df:26:9c:b7:3a:a8:5b:64:05:9b:
7b:23:e1:b7:c7:57:02:60:91:b4:df:f4:c1:60:b9:
8f:7a:cf:b5:46:65:99:3b:20:f4:a0:0f:85:80:f3:
a4:34:09:12:6a:a4:c4:ff:fd:71:6c:a7:84:d2:ad:
44:d9:81:26:ec:c9:0b:dc:9a:4e:3b:e3:1d:6a:7f:
0c:fe:d1:c0:e9:b8:41:68:78:81:97:8a:e0:6e:f9:
1a:66:c1:45:40:2b:e6:30:c9:76:79:73:65:c1:c2:
ce:64:e0:a2:01:03:c5:36:35:d1:66:a0:27:03:d3:
e9:9c:6c:fe:1d:f8:99:44:72:64:b2:e1:94:c8:7f:
c7:bc:bd:5d:da:1e:a1:4e:2a:0a:45:7f:08:a6:f7:
01:cc:01:b5:2e:84:af:35:97:e6:44:bf:69:9d:16:
15:cc:35:12:80:6c:d2:73:bc:c4:43:f7:4c:c3:43:
b0:6a:1c:87:f0:da:df:01:f7:f3:8a:3f:9b:87:6f:
7b:7b:d3:5a:56:6e:80:c2:7c:52:1d:ea:bd:48:fe:
7d:08:da:2d:5c:fd:7a:3f:7f:cf:b4:98:65:1a:af:
54:eb:12:e5:cf:53:c7:fd:20:b2:18:7a:f5:25:ec:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:D0:0E:83:97:95:9C:8C:3E:68:E5:D3:B2:14:BD:28:3D:28:CD
X509v3 Authority Key Identifier:
keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c7:8e:a1:e1:91:a3:a2:83:30:16:9d:92:95:db:12:25:cf:
10:25:8c:06:37:ec:05:1b:ba:6f:34:c1:aa:00:56:f6:1a:ea:
aa:e3:a1:2d:ef:bb:ed:f1:7a:69:43:5c:cb:68:2d:0a:e2:0b:
12:91:fe:89:77:d1:a9:6d:ce:76:86:9a:b3:7b:ee:05:b0:74:
11:1a:83:8a:3b:21:c8:42:97:4f:ff:0e:9e:f5:11:7b:81:ff:
44:d7:3b:69:01:14:c5:13:f9:60:3a:fc:9d:b3:4b:f6:b4:59:
46:09:07:19:22:57:fb:e2:04:62:5a:59:29:5e:f5:6b:47:df:
6a:ac:22:66:6c:bd:d6:31:94:18:73:3d:23:21:d4:7b:a4:37:
04:79:12:79:f1:bc:bc:fe:65:1f:d1:53:03:00:6a:13:94:7d:
21:58:f7:4b:c9:f2:69:6a:fb:33:6a:36:91:f9:f5:50:6f:ec:
6f:8a:00:39:50:b1:66:7d:26:67:0f:fc:e9:e9:cc:26:54:38:
15:c7:95:3e:5e:03:e8:08:6c:52:19:55:6a:f9:c6:c9:86:29:
ff:43:17:73:df:48:24:2a:82:cd:80:24:fe:61:52:a0:16:f3:
e3:f3:ac:9e:88:7c:23:73:62:2e:d7:a5:a3:a0:50:0e:7b:92:
27:c1:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:29 2025 by rpki-client