Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: kRL1TsiyOVhXYKBZehq6hhybKwtUgD+54ZqGztwQYP8=
Subject key identifier: 9E:EE:27:7E:2B:2C:B0:27:EA:34:5F:5A:2E:57:B4:D4:68:A0:B1:6E
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 0194BBCDC06D027F3C6202B6E53267A3DC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 0F27
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: IGAjXKG2Xhaagi6rstGwud1rSO8PC3yuFJuSf4sywLM=)
2: _F8TtMCr-GrK1-WadHxYHdaqsV8.roa (hash: OhF5DdkGtGDTUS9hafqNY2D1lnp3rhyFQSObJeOPCts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:6d:02:7f:3c:62:02:b6:e5:32:67:a3:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=9eee277e2b2cb027ea345f5a2e57b4d468a0b16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:87:1f:64:91:5d:f8:f7:55:cb:2f:98:2a:
90:1c:67:1b:05:16:aa:38:3f:00:61:c8:f7:a7:a2:
d9:31:63:84:0a:57:cf:92:91:80:36:a5:59:e9:55:
14:d4:3f:7b:58:be:67:5b:c4:dc:da:fa:43:76:b0:
e0:82:75:1a:9b:7b:05:e2:67:3b:5a:5a:4c:96:88:
89:2a:53:3c:5c:91:62:2c:86:9a:ef:1d:ab:d9:31:
83:4e:b5:12:42:2d:53:6f:62:51:2e:31:f2:4b:7e:
f9:d9:61:4a:a0:29:94:21:d9:8e:3d:d3:f5:54:b3:
39:b7:5e:00:3a:85:1c:19:57:f8:85:7d:ab:6f:c3:
a6:94:4a:0d:42:5c:ec:35:c7:61:27:c2:ed:2d:25:
79:6e:3f:68:48:69:c0:25:4e:e0:b6:67:7e:d2:cc:
98:35:31:e9:46:17:82:c7:bf:32:25:43:49:63:95:
00:45:ff:82:c3:24:35:68:4c:6c:fc:5d:a3:f8:79:
73:7c:be:47:f4:b1:77:b6:72:bf:67:d0:dd:13:7f:
16:3c:e1:ed:dd:bb:a9:1e:4d:74:c7:eb:57:bf:e7:
3b:aa:0e:60:f2:fa:e3:1a:4c:d1:c3:8e:bc:d5:0b:
41:40:2e:fe:7b:46:86:bf:49:60:fb:68:77:97:5d:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:27:7E:2B:2C:B0:27:EA:34:5F:5A:2E:57:B4:D4:68:A0:B1:6E
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:83:a2:a3:c2:60:96:ab:3a:8e:46:35:72:47:4f:15:d5:0e:
24:c3:f9:95:00:17:08:e8:7a:06:7f:68:88:64:cc:8a:7c:f3:
43:fd:7b:bd:0c:b2:e9:ee:7a:eb:27:0b:f7:f6:59:e4:f8:b1:
95:0e:7b:2b:95:1a:cf:f1:21:55:04:21:31:36:9b:5b:c8:19:
e8:28:df:41:92:04:99:45:62:90:4d:26:c1:38:33:c8:ba:fc:
38:c7:47:7e:01:80:e9:b9:7c:11:66:7f:ec:fd:d2:40:f2:a7:
13:4c:54:c6:2d:f8:d3:2a:40:3e:db:3c:cf:08:00:21:ba:ec:
bc:44:94:7b:a8:33:0b:20:20:29:0f:63:3e:37:29:59:5e:c4:
c0:a3:59:04:4e:a6:b7:13:de:ac:11:cd:ee:d0:df:09:d4:60:
be:f6:f9:ad:6a:0b:a2:f2:5a:d6:0e:b9:4f:dd:8c:3e:1f:03:
ce:35:f6:0b:7b:4d:a7:d0:f1:89:06:89:88:f4:dc:75:8c:34:
48:1a:95:9e:71:99:cb:e9:44:6d:07:17:35:32:c2:9e:4b:59:
c4:67:05:a6:77:81:27:ce:68:6a:da:a4:a3:33:ab:b6:c3:f1:
1e:01:ee:04:8e:1d:bd:9d:47:6f:23:16:c6:b4:1f:3b:fb:28:
c0:b0:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:02 2025 by rpki-client