Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: mCD6lQslOh+0tF7fgbCWkU61NzCuMHz3tfbDOxvZuNc=
Subject key identifier: 73:9F:DB:67:61:59:7E:F1:99:FC:E1:D3:83:6B:E2:B5:85:73:03:CD
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0194BD4E9AF271867C57835D65A8AE30C02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 96
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: YLzjXFPornUXLu2M3Yw34ctxbkyVvTCszTOiI/ua0HE=)
2: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
3: v0nl9NqwXGBOlfyyWw3gzh99SpU.roa (hash: /ca8ENtweJNRwbhlCWk7eKckVCWYU5D6l6K/AnXg+Xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:f2:71:86:7c:57:83:5d:65:a8:ae:30:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=739fdb6761597ef199fce1d3836be2b5857303cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fa:cb:06:dc:11:3e:e4:36:6c:d7:ee:48:ab:
1c:65:d4:f7:0c:0b:d5:23:60:92:a8:af:ce:71:63:
35:75:c8:bb:76:50:e5:8d:fc:14:03:ec:20:40:cb:
a5:e1:c9:a7:94:77:34:71:14:b0:d8:43:c2:6f:62:
45:9f:6b:fb:af:25:2f:ff:d5:2c:c6:15:94:57:d0:
75:33:0c:47:04:15:e1:08:85:66:34:0a:74:f9:4e:
5a:86:0e:d1:de:ab:91:ce:92:31:b9:13:1d:e0:52:
32:72:85:c3:6d:56:cb:fa:ff:e2:8b:ca:3a:4a:8d:
a3:bb:43:3d:73:93:b8:6e:c1:0c:cd:90:ba:b9:46:
84:e6:b9:0a:19:8b:6c:95:49:48:4c:1a:d7:04:f1:
ff:7e:d5:54:f8:93:86:e5:5c:9e:e0:8a:82:07:a6:
52:e6:09:29:2a:71:da:5d:0c:a3:8b:ce:87:36:d0:
ce:77:d4:44:5a:1a:12:b0:4e:30:b1:6a:36:b7:6d:
8e:c7:4a:56:48:7a:4c:fe:e2:8f:7e:42:dc:10:86:
e9:37:25:db:f3:36:26:a4:e2:80:35:84:b1:3d:de:
e1:28:31:db:54:fd:5b:d1:1f:da:e0:0a:f6:0f:31:
8e:53:f2:95:10:9e:97:39:72:b4:41:70:f0:da:91:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:DB:67:61:59:7E:F1:99:FC:E1:D3:83:6B:E2:B5:85:73:03:CD
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:28:8d:7e:8f:c1:e5:47:a1:d9:51:fa:e7:c6:c6:ef:bb:8c:
a1:4a:4d:d7:7b:a8:0d:45:de:f5:12:b2:c1:1a:c0:ab:b3:ef:
96:1b:5f:80:88:cd:a5:6c:e2:45:41:fe:12:17:cf:97:1a:51:
76:08:4e:1a:ec:b5:d5:6c:c6:86:42:ca:d1:0e:33:c3:67:a3:
eb:b1:a2:df:49:85:d5:f0:ed:2d:a3:e1:1b:0a:83:a8:1e:14:
23:58:f1:3e:ad:32:15:2b:15:6c:ed:8b:41:6a:aa:62:f7:57:
85:97:2c:9e:07:e7:92:89:0e:9a:d0:bc:76:0b:c2:4a:10:63:
e1:36:35:fa:00:2b:62:34:40:ac:7d:41:76:b5:d9:6c:01:86:
f3:97:2e:99:14:74:12:2f:a2:ef:74:2d:79:e0:b3:12:f2:21:
5f:0d:43:2c:a7:e0:5f:49:35:0b:e3:6a:21:97:0e:8c:45:f8:
4f:53:c7:81:27:b8:20:06:b2:3a:a4:0b:1d:ae:2a:45:80:b7:
5d:32:fd:42:7b:5e:85:cb:b5:73:24:b3:bf:e3:3d:32:1d:ab:
a5:03:be:30:ba:72:62:94:45:d4:56:8e:3b:d1:dd:be:35:02:
0b:77:0f:86:d1:d8:93:ba:18:74:e4:42:1e:c2:db:db:b2:c0:
2f:ca:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client