Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: p+12Gp5yNWdjNwLUUk6g1oVOp5OrwNWD0sxoyIYvyU0=
Subject key identifier: E4:CB:2F:05:F6:E0:E6:BF:CE:9D:0A:45:30:87:0F:C8:9A:65:94:E3
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 0194BD852BB3B25ECA1C334549EA0912B164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: VMVvvuFAUkXL4C28RgEbl5H1xV/j0sikMLj0bKe23Kw=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2b:b3:b2:5e:ca:1c:33:45:49:ea:09:12:b1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=e4cb2f05f6e0e6bfce9d0a4530870fc89a6594e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:9b:a5:64:5c:67:3f:9a:05:aa:6a:ad:70:
9e:a6:3d:78:e7:84:71:9b:43:ce:78:0d:b5:c6:61:
13:26:6b:b3:84:fc:ef:99:51:80:d7:41:e5:3a:59:
2c:84:54:bb:3b:71:52:29:b1:09:0a:0f:21:a7:2f:
5f:bf:8b:0f:7b:2e:45:a2:cb:96:2d:b5:62:01:bc:
90:87:4f:6e:a9:2b:a4:ee:c9:3e:c2:4a:63:b0:9a:
97:2a:a4:11:73:28:e6:dc:91:1c:58:17:c0:81:18:
80:51:e5:80:8b:db:b9:bf:9c:eb:89:ac:b2:bf:58:
f5:80:6f:52:93:4a:a5:aa:39:3e:8a:f7:92:5e:04:
d2:91:c3:51:2e:f3:55:0e:83:ea:bd:c4:e9:2e:1d:
a8:d2:3d:b9:a7:6b:ed:ff:b4:0e:c1:0a:bf:c9:e0:
6a:8e:43:46:ec:2d:54:77:5f:14:a8:f0:07:f8:1c:
2c:ec:39:b0:e8:b7:6b:31:aa:26:90:fe:e9:2e:b6:
c7:b5:84:87:3a:15:a1:23:0e:fb:ac:da:26:e0:b6:
18:71:e6:31:69:56:6f:9a:67:ef:9e:61:45:ad:53:
35:b1:dd:46:29:72:d7:8e:42:ce:14:be:9c:72:71:
24:4f:de:4a:e6:b0:1b:45:bf:eb:69:f7:0b:5a:78:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:2F:05:F6:E0:E6:BF:CE:9D:0A:45:30:87:0F:C8:9A:65:94:E3
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:65:c7:1a:99:44:1e:78:73:ee:eb:f5:25:ed:25:be:8d:be:
36:e4:c9:e1:a6:4f:95:2c:41:af:b9:8f:e0:00:ec:14:b4:71:
3c:2f:62:bf:25:be:48:39:08:05:a6:b3:9c:87:4a:2e:63:e0:
8e:00:a2:2c:63:26:6a:ba:55:43:64:57:71:61:44:56:1b:98:
cc:b0:34:db:b9:88:ed:37:58:63:22:06:fe:6c:af:4f:95:f9:
87:fd:61:b2:3f:ee:bd:cf:82:e6:3e:fb:ee:1c:8a:d3:87:5b:
67:cc:23:00:52:c7:78:75:dd:15:6d:9d:30:1b:0b:ff:f6:ca:
9f:03:48:63:73:c7:58:cb:8f:de:c6:6c:00:bf:08:9d:0f:46:
7b:c0:ad:ee:0c:88:0a:f3:35:a8:2c:f3:b1:1c:dd:1c:cc:ea:
9d:7b:1b:e6:17:4e:20:a2:5c:a4:8c:19:c9:ed:82:97:50:02:
9c:04:84:15:5a:d3:76:1d:ef:9b:30:0d:de:74:8b:a6:f9:e6:
79:98:bf:a3:bb:94:b7:76:75:1b:0a:fe:f9:ea:0c:5e:21:0e:
de:81:f8:c2:c5:c5:57:67:71:4d:cc:5d:b8:34:53:5f:c0:07:
4c:36:e1:33:4f:34:c7:1c:2e:9c:42:86:f5:c0:af:41:96:64:
c8:c1:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:47 2025 by rpki-client