Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: PABND5KE+3KsXbCm4qEbBAauDIGbBoEL33wRjJjDDxI=
Subject key identifier: BF:63:F2:C0:34:3E:A6:C4:5C:86:03:E5:2C:4E:FD:35:F0:AC:4A:77
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 0194BCA9FFEE9B182A87D9C7AEEE1868C277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0971
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: sq52awxoGzgFLOz8gEfw+tcqn1jddgmW1n0uPLHIlVs=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ff:ee:9b:18:2a:87:d9:c7:ae:ee:18:68:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=bf63f2c0343ea6c45c8603e52c4efd35f0ac4a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:fc:26:c0:40:21:fe:2e:1c:e3:7a:49:ed:
f9:bb:5f:18:ef:97:d0:c2:6c:0d:fe:89:5a:ac:fd:
28:7f:63:dc:a2:85:39:57:5f:0e:11:a7:a8:04:4f:
b9:be:19:0b:44:9d:1a:33:eb:6c:07:91:17:c2:6b:
47:d5:63:be:ea:a1:f4:45:ba:c8:ba:e7:2f:9c:1b:
b9:5a:be:5f:02:d4:ed:15:32:e1:f2:b2:74:41:4d:
34:1b:ff:dd:b3:9d:83:0c:c4:ce:8f:bd:5c:44:d7:
11:26:4e:29:e3:00:f4:12:78:3f:74:76:fa:ed:aa:
6a:e7:15:2b:c1:ea:19:19:fe:e4:2d:3a:14:ff:a8:
a6:b1:e0:9a:9c:af:8b:bc:27:4a:50:2b:a3:97:71:
1c:3d:ee:c1:ea:50:b9:3b:c0:59:5a:0c:f7:5d:d7:
d8:8f:32:bf:3e:0d:94:d6:43:c1:75:dd:c1:7a:d3:
b0:0c:28:83:f8:2e:aa:df:0e:21:80:05:6c:64:c0:
06:08:ff:36:a3:a2:ad:a3:8b:03:e0:08:47:2b:6f:
6f:f0:e8:05:87:ef:d7:8a:90:8f:38:e1:8f:fd:ae:
04:03:fb:2c:cc:0e:5e:37:b9:b0:16:4e:e9:96:3b:
83:eb:04:a4:e9:cf:3f:ea:ad:e6:c6:60:5c:53:ec:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:F2:C0:34:3E:A6:C4:5C:86:03:E5:2C:4E:FD:35:F0:AC:4A:77
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:de:15:dc:d3:8a:9d:e5:85:46:1a:3c:b8:61:b3:6e:bb:
29:09:3d:7d:39:41:25:2a:31:03:a2:76:c1:44:ae:86:df:7c:
4c:35:64:f2:49:0d:54:1e:14:7e:ca:51:3a:22:5c:84:1c:f7:
8a:56:77:91:d5:78:fc:f5:2f:8c:6e:98:20:f1:bf:91:f3:3e:
ab:02:85:58:55:94:5a:73:d3:7a:cb:8d:1c:cd:9b:a1:cb:2b:
11:06:6a:f9:c8:0b:3f:d5:7f:ff:20:d7:cb:75:01:42:62:36:
8c:4b:dc:f4:39:db:e3:59:7c:17:2c:32:53:1e:26:51:0f:30:
4d:de:64:94:18:34:2a:54:62:c2:f4:0f:7c:78:a4:21:29:65:
dc:d1:6e:25:01:ca:a2:aa:e9:28:04:38:1e:9a:64:c8:78:13:
8f:60:04:1d:e6:d9:3b:01:c8:03:db:ed:a1:09:75:59:b6:64:
65:f6:cd:c3:25:db:c2:88:c5:08:94:73:6f:44:10:85:ab:70:
18:6f:7c:f9:46:bc:8e:ff:d0:31:1d:45:55:67:73:e9:f4:66:
93:f7:5d:c9:d9:73:d0:75:f2:7a:68:8c:fa:da:88:bc:9a:9f:
dd:b5:32:ab:73:05:f0:29:e4:e5:79:a4:52:53:c2:76:70:08:
e6:73:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:35 2025 by rpki-client