Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: JR0gTeqLbW3hd4B1GHuUhkI39ELOwjwXGvTrbJ7ro1w=
Subject key identifier: 7C:86:23:67:1A:F3:8B:46:C8:A6:70:9F:47:93:6E:48:54:5A:AD:FF
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 0194BD4EA705D9A2EE1FB38A8F9861B456B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 099F
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: PMA0hoVQCXmKJhJj8NGjv7VVvBM10Sa+fBMZ5uRnF38=)
2: PMNnc8UiTx_1PdJEiYIJsVqvM18.roa (hash: glo0oQZnzXQ/WEXl4o++QXVkyGkwmaHI6OvTjJhSMHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:05:d9:a2:ee:1f:b3:8a:8f:98:61:b4:56:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=7c8623671af38b46c8a6709f47936e48545aadff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:3d:16:60:4c:88:1b:2d:95:b6:a1:b6:40:
cb:8e:ee:ee:16:94:0b:fc:de:cc:19:37:7a:25:66:
f4:fb:86:69:31:9e:25:a2:1f:76:c2:da:cd:ab:8d:
b8:b8:bd:15:f0:e3:60:d9:df:41:4b:af:9b:92:81:
d5:07:ec:fc:41:77:42:c6:6b:27:36:de:90:14:01:
9c:77:0e:f7:06:94:7b:f2:97:c2:c0:d3:91:c2:7d:
73:2a:90:56:eb:96:f1:c0:6a:21:02:3d:02:0b:f4:
fb:52:3a:37:72:46:fa:6f:5c:56:24:fb:5b:7a:34:
ae:db:bc:ce:64:85:c3:ad:cd:24:b5:fa:ef:4d:a4:
51:98:90:54:73:5a:43:31:ff:41:bf:a2:93:8d:df:
82:f9:f3:d9:16:6c:71:c2:65:19:7a:72:12:a1:c5:
a3:c0:6d:01:91:e0:3a:56:7c:68:a2:af:ed:0f:50:
35:ba:82:74:a9:de:86:b6:61:38:17:39:93:75:5a:
aa:26:cd:ce:5e:65:c0:4d:9b:ff:00:9c:8a:3d:44:
c9:a1:1e:b7:a8:dd:e2:85:4a:c0:33:63:b9:3c:ab:
7a:ce:61:ec:98:42:a4:c4:99:b2:1e:9c:37:e4:bb:
6c:d7:f0:89:a2:d8:d0:3e:dd:53:e3:90:d2:48:41:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:23:67:1A:F3:8B:46:C8:A6:70:9F:47:93:6E:48:54:5A:AD:FF
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:df:01:b1:1b:f7:07:be:2f:e5:97:78:e0:35:5b:0e:bb:ad:
b5:b9:57:a1:99:05:7b:e7:4a:87:b1:6c:32:96:9b:44:ee:69:
f1:c3:34:12:0c:91:b9:c4:2b:fa:fc:bd:54:70:de:b9:5d:2c:
50:01:9e:e1:9a:25:94:49:bb:35:20:bf:7b:c6:d6:4d:05:79:
03:99:c6:25:35:0a:14:b7:e0:40:2c:a1:c9:9e:a2:f2:1b:25:
13:36:4e:ae:8a:da:35:f0:aa:54:34:ff:24:65:5e:95:5f:45:
b1:fa:41:ea:33:73:93:cc:ef:b6:18:3a:de:ae:57:41:dc:c3:
79:ba:b5:1e:a5:4d:31:fd:e3:ad:d9:43:4a:7b:ac:92:6e:79:
99:45:4d:cb:80:62:e8:dc:f6:1e:64:8c:c5:94:d1:3c:50:cb:
82:63:ac:bf:5e:39:ee:b8:ca:93:37:1d:ec:27:7e:e1:9d:24:
69:5b:ef:91:21:e0:91:94:26:39:41:7f:9b:c6:38:79:cc:2a:
79:55:8c:88:5d:9b:a5:5b:cb:40:58:92:94:6c:52:98:8a:7f:
ae:fe:d5:7d:62:c5:d8:81:0e:a6:90:fe:bd:40:a7:c1:ad:42:
b8:1f:7a:e4:ad:31:8a:95:9c:79:a7:5e:8f:e0:66:4e:08:60:
b9:c9:9c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:19 2025 by rpki-client