Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: AeKvNOwiniYdJkj1lMRrgO8LERtc9GLTTRQOSwdBfM0=
Subject key identifier: 9C:32:2E:CC:66:90:6D:3F:3D:B2:A8:AE:73:37:68:7C:C0:03:EB:E7
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 0194BCA98CE69C1BBC64EACFC976CAD54626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: KFxs769oKYSlN9E-IJj7uVI5-Jk.roa (hash: oeJ8lNpcZ8slOJ+v6lew9m45/w6Rj6vHO1zS6reB6dA=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: QjTcBsxNiTcu8DuAClt0Vzy2xG7w5qoIS7TfsdZz8ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:e6:9c:1b:bc:64:ea:cf:c9:76:ca:d5:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=9c322ecc66906d3f3db2a8ae7337687cc003ebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:d5:0d:e9:90:85:12:91:72:23:af:ef:cf:
49:78:c0:99:4a:9a:6d:84:c2:3b:36:31:f7:b9:d9:
45:2a:2a:8c:20:61:8d:a3:2c:f1:d6:8f:0c:b3:ae:
7c:cf:7b:d0:01:c8:31:08:0a:40:42:74:a5:e4:c3:
8f:6e:2c:26:65:62:85:77:e7:0b:1a:2d:cd:83:49:
2f:4f:80:4f:3d:89:21:ad:cc:f5:a4:9b:05:57:e1:
93:7f:78:6e:e1:79:10:d4:79:e2:93:f9:7b:01:9a:
25:7d:2f:95:5f:35:50:37:ef:20:31:14:db:ec:e2:
de:af:e0:47:80:66:3f:8f:ff:6b:b5:47:76:40:74:
38:0e:e7:77:18:cb:0a:88:1e:67:3a:92:bf:f6:b8:
e1:64:42:5a:28:32:70:83:e6:a0:ed:03:df:aa:6d:
e5:cd:93:29:97:af:3d:8b:bc:ab:93:75:a2:37:0d:
1c:a6:f1:7b:cb:c2:8f:ba:1a:9a:6e:bf:29:49:2f:
3a:62:b1:ed:50:1b:ec:ef:1f:ce:88:23:30:6c:e3:
92:ae:20:68:0a:4f:48:30:06:ab:ca:62:7f:a8:8e:
c8:bc:36:39:ce:f3:79:e2:38:ae:76:48:f2:17:40:
81:74:11:93:70:9e:88:6c:27:5b:67:20:c0:12:6b:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:32:2E:CC:66:90:6D:3F:3D:B2:A8:AE:73:37:68:7C:C0:03:EB:E7
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:14:e8:28:73:7f:19:21:b4:f0:ed:a3:64:78:6f:68:4d:
66:d7:a6:84:b4:ef:6e:70:18:2a:0d:54:35:a7:4f:6c:8e:be:
86:01:0b:ea:3f:9d:6c:ac:04:ec:4a:dc:fc:f2:e0:41:7e:1c:
c0:fd:ac:cc:90:41:f0:34:5a:37:26:75:d7:88:76:a3:c4:93:
62:aa:52:35:ac:1b:2b:55:a5:36:c2:e7:b3:5c:c6:ea:64:c1:
25:f0:d4:42:90:7b:84:f4:44:a2:b7:78:13:2a:d0:41:59:ec:
98:59:3c:b5:cf:b9:57:f0:46:49:ba:99:5b:6e:d2:be:ba:14:
7d:e5:79:45:be:09:1f:59:c2:16:09:28:87:a2:62:13:35:a1:
25:53:3b:5d:c6:f5:b7:29:30:7c:6a:f2:49:70:cf:9e:91:b1:
c4:ef:b7:77:56:de:1d:2b:0a:b3:11:dc:8c:18:d8:98:52:e7:
76:e1:e9:0f:d3:6f:d1:2a:e2:39:c4:df:c6:df:57:cd:2a:2e:
8c:e9:16:62:bd:62:6b:41:6d:26:4d:63:9a:c6:07:3d:1f:b8:
f9:0d:d8:65:f7:c3:23:a9:49:10:6b:c3:32:61:c0:27:0a:2b:
05:4c:f8:8f:cd:8c:cd:21:8f:9f:c5:ee:5e:9e:40:5f:82:23:
1f:cb:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:38 2025 by rpki-client