Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
File: 68Uk1idrD_v4evfH37gmiX_seXY.mft (raw, json)
Hash identifier: XjQKRuHLg9IH/dQzcUNnOblbITcL4hyCNYkx8I82PzU=
Subject key identifier: 04:34:70:BE:63:06:26:D0:2D:92:93:13:2F:8F:02:BC:FA:AF:0D:F0
Authority key identifier: EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
Certificate issuer: /CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Certificate serial: 0194BD17920708044308B44501C2FB9F925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
Manifest number: 0454
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 68Uk1idrD_v4evfH37gmiX_seXY.crl (hash: Auc4GuVU3PWnP9eSTZrUbDOJowV4C+BDqGQyNysvOfo=)
2: Bc5MZ_WIrACpPANk5bSywtmoLTs.roa (hash: UuacJmWSGdWyhAmdhk7kB4JhqQwiJFQ9axbJenAEICk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:92:07:08:04:43:08:b4:45:01:c2:fb:9f:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=043470be630626d02d9293132f8f02bcfaaf0df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:85:0c:98:ec:85:9d:b0:26:8e:c7:6e:b0:
d0:dc:61:bb:77:8a:14:d5:56:7a:a6:00:1d:a7:82:
d1:f5:d1:8a:e6:6d:c6:ff:6d:f8:2a:cc:12:85:c9:
15:4a:50:ea:4e:89:8a:06:81:d2:d5:14:cf:99:46:
55:31:c3:8d:81:4c:7c:c9:76:80:e5:c4:5c:00:1f:
6d:4f:62:00:30:66:3d:3c:e7:e1:fe:56:cf:3b:ef:
fe:9e:5d:f4:f7:1e:6a:df:9e:30:6e:aa:86:44:cf:
14:97:38:15:9c:7f:6d:fc:88:34:da:2b:45:00:38:
2d:e4:5b:60:c4:8c:39:29:4f:11:dc:4f:aa:b7:d0:
11:33:92:be:ce:20:6d:72:b6:76:d6:f3:40:c6:05:
35:2e:19:01:9c:9c:07:76:35:a0:18:34:53:72:ba:
e7:38:af:28:cf:7e:f2:09:4d:5b:3c:77:da:22:df:
82:41:74:a0:51:ff:44:14:43:19:80:53:e4:5f:4f:
ca:c8:ff:ea:e8:24:f0:ef:83:7e:5f:9c:0d:23:eb:
34:e6:c4:d8:3c:9b:44:1e:6c:a4:d4:85:3a:39:b0:
7b:89:60:34:26:b1:97:69:2f:ae:b2:8c:0f:92:32:
0b:67:bf:76:21:ea:0f:e6:78:56:36:e5:70:f3:34:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:70:BE:63:06:26:D0:2D:92:93:13:2F:8F:02:BC:FA:AF:0D:F0
X509v3 Authority Key Identifier:
keyid:EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:de:e7:30:13:81:a9:40:25:22:40:20:75:b9:f2:a3:91:a4:
c7:8d:62:fe:4e:2b:7f:3b:62:0b:bd:7a:64:9b:c5:9c:0a:02:
5d:18:74:ae:f1:d2:74:db:aa:5b:b3:05:bc:60:ce:41:a7:94:
27:15:e7:9c:a2:29:40:4c:10:7f:9a:a3:97:95:95:47:36:18:
8d:ec:7b:e3:31:a6:f9:b1:b8:7c:e7:27:c7:bb:24:d4:22:6e:
e5:d8:93:34:3f:ee:0c:6c:d5:bb:6a:c1:a7:7d:29:5b:80:fb:
f4:e4:87:b0:77:e4:94:86:2d:14:86:7d:ff:65:ae:11:39:72:
0a:f3:fc:4c:08:1b:1d:38:8a:0a:47:81:73:92:78:b5:87:47:
7b:82:05:4e:f4:5a:33:5b:ac:56:14:a6:1a:3e:dd:06:98:24:
1e:9e:8a:bf:0a:55:c0:4f:04:47:b3:65:cb:7d:c8:2e:98:9b:
34:ef:14:26:b2:93:86:54:bb:db:2a:0b:87:08:72:97:90:58:
0d:9a:ac:06:b0:00:de:b7:51:31:50:18:0f:21:d2:99:a4:64:
43:9d:88:19:9a:00:4c:be:c2:62:b3:64:c5:07:38:73:1d:4b:
48:99:f1:5d:f7:cb:07:d4:b4:c1:a2:c0:92:fc:c1:7a:29:e7:
52:c5:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:26 2025 by rpki-client