Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: LNHRKofAs+pfc1zZf5rztHPZ7ny6c8JQ5WvU4g/U7z4=
Subject key identifier: 6C:2E:13:B9:61:3D:0C:28:5F:1D:D1:B4:4C:57:B8:21:15:05:56:F0
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 0194BCA9848B8E9D4BD1FF3414A4A8F4E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 42
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: lbLP/nr56CmH147H8rn4ExWsvpNk3YN9IiiBqYJPwnc=)
2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:8b:8e:9d:4b:d1:ff:34:14:a4:a8:f4:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=6c2e13b9613d0c285f1dd1b44c57b821150556f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:d9:f0:a7:83:55:18:60:ca:03:50:0c:90:
15:5e:8d:e6:d5:e6:58:a6:34:75:32:e5:30:c2:6f:
35:c1:2d:1c:f5:83:cb:a9:8a:77:e6:da:fd:b9:4d:
d4:81:71:80:00:27:5f:ff:6f:cb:3e:e8:3c:5d:f1:
e3:0e:5d:cd:6c:26:63:13:98:b0:4e:3c:00:d5:9d:
62:26:9c:12:e8:06:bf:62:6f:f0:fa:15:09:17:1c:
8e:20:ce:8c:d1:6a:2a:91:93:73:f0:c3:11:bd:c5:
59:ab:67:e1:89:9b:79:56:2b:03:1d:8b:22:b5:c7:
d5:b4:4a:cd:04:ed:d2:ee:3b:a7:26:b8:c8:9c:06:
bf:a4:0e:dd:b2:5a:93:23:19:1e:71:13:3f:08:11:
d4:7e:a0:86:49:9e:f1:20:79:51:25:e8:91:66:8e:
5b:1f:72:ed:73:d5:8a:e5:20:7e:e7:d1:aa:59:5b:
b9:d3:b6:a0:ec:54:08:b7:ad:9f:1e:44:dd:c7:86:
60:13:f3:3e:d5:f2:cd:4c:5a:ef:1c:a4:a8:88:7b:
bd:eb:7a:b4:13:7a:fa:92:6d:6f:71:d6:55:1d:c2:
ca:a5:11:71:11:fc:fd:87:b3:41:84:21:4f:90:a5:
a7:d2:eb:bb:92:5f:3a:81:98:85:32:95:ea:35:ba:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:13:B9:61:3D:0C:28:5F:1D:D1:B4:4C:57:B8:21:15:05:56:F0
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:14:0f:a3:78:82:9a:95:02:de:0d:38:b9:67:a5:0c:48:54:
94:8f:41:f6:bc:fe:42:e5:33:db:07:7a:42:56:32:ff:09:76:
30:e4:72:3c:9c:c3:67:dc:73:e4:4f:07:41:99:9c:32:b1:b3:
b0:0c:5a:f7:59:7d:d6:25:88:82:b2:20:6e:93:63:0f:ce:27:
3b:0c:c4:c8:39:bd:67:ae:fc:a9:58:81:ab:35:84:cd:6d:f3:
15:47:ac:63:3d:f5:44:4a:1c:8b:cd:3f:e5:0f:d9:2f:f2:ec:
b7:1b:43:2b:97:40:8f:81:75:6c:02:7b:05:5d:7a:8d:4e:8f:
4d:a0:d6:7a:73:bf:79:e4:9e:db:e1:b3:51:e5:07:e7:83:e7:
11:e1:07:3f:9d:af:a0:37:b8:b6:f4:ee:88:ca:94:0d:33:ae:
83:1c:f6:f0:5f:36:7b:17:4d:58:46:d8:97:72:81:96:16:22:
e1:82:00:52:4c:45:db:5a:e5:1e:27:28:80:67:8f:d8:fe:2e:
e3:1e:67:b0:4a:3b:2a:65:88:94:17:12:76:98:08:f4:6f:0d:
8b:ab:ff:e8:07:de:7f:6e:37:45:01:36:87:1e:cf:05:a5:8a:
d9:4a:50:34:e2:25:73:9c:d9:96:a9:08:b6:27:98:26:e5:e9:
83:ed:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:56 2025 by rpki-client