Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: eWah+EI/tccOXfAkQkclL/d6beg3E7ZY7MpYNrR8YLQ=
Subject key identifier: 8B:48:73:68:4C:27:E9:9B:96:3A:AE:96:03:04:32:BF:35:CF:4E:C4
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 0194BBCDE4265DA7FE1599E41C2F29A3EC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: sL6L6J87bvARk66fauodQrJc/OWNPV8VToV0uq39kjA=)
2: cBAS0GUhF4mz2fqaOHRlVgN3CFs.roa (hash: Lp1yFkf1vOWXjEEeUSdOv9NCeGF4SfR636ANc/ZvdMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e4:26:5d:a7:fe:15:99:e4:1c:2f:29:a3:ec:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=8b4873684c27e99b963aae96030432bf35cf4ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:37:92:44:c1:68:0b:ad:18:df:5b:af:72:
96:e8:f6:93:61:e2:5f:6f:af:90:bb:2b:1b:98:d1:
35:b6:71:a9:40:92:b6:51:b7:77:3f:c8:2d:61:9c:
40:59:a7:80:72:38:c5:91:73:38:a8:eb:88:fc:2d:
58:e0:28:55:b2:cb:cd:ae:1e:0e:bc:f2:09:38:1b:
7a:68:d4:7e:99:6f:75:6f:b3:e1:f3:39:ca:e0:26:
12:cb:65:36:c8:47:b3:7c:ec:dd:0f:e7:33:0a:6d:
de:be:e7:fb:ad:0f:6e:e2:12:c3:99:3a:54:31:be:
11:ae:62:fc:ba:23:49:1e:59:c6:f3:bc:25:68:d7:
ee:39:59:0c:b1:d7:47:f5:0f:bd:36:1f:ca:a9:a2:
03:7c:01:fe:52:6b:3a:41:f4:11:58:72:e9:f2:57:
ef:a6:7c:63:43:21:2e:f6:01:0b:c3:a9:d1:da:78:
9a:3c:d0:ff:59:e7:b7:92:d2:97:9c:a6:c5:2b:af:
1d:c4:a6:87:4e:29:1e:78:8d:82:47:d9:4e:19:24:
1d:8c:38:90:e8:82:6b:ec:1d:86:e8:e7:51:fb:8a:
60:b9:02:b3:11:e9:3d:5f:6e:06:72:b2:28:12:1f:
f2:3e:76:2b:20:c0:f1:9b:38:d8:1f:a2:d6:95:3e:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:73:68:4C:27:E9:9B:96:3A:AE:96:03:04:32:BF:35:CF:4E:C4
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3e:2c:ee:cc:3a:4b:0c:a8:27:60:9a:e1:92:fd:ec:72:be:
08:47:a6:be:b0:f1:fc:94:ca:60:f8:0e:c8:74:20:57:2b:70:
57:bf:41:b2:6f:eb:2d:48:a0:01:06:52:67:a2:eb:16:e2:28:
85:a3:99:50:de:a3:6b:52:32:b9:90:1f:cf:81:47:a2:88:61:
4d:e0:91:ec:4d:28:98:03:4d:eb:f4:39:0c:de:47:7c:aa:2e:
a2:b8:e7:75:82:5d:93:9a:84:7a:02:61:66:0c:b1:de:31:a3:
f3:dd:9f:94:82:d9:70:a0:4c:d1:3b:e9:0e:8e:ec:94:ba:0f:
25:71:f3:86:00:5d:47:06:37:b5:e1:7a:a8:9d:d1:14:73:e4:
c2:0d:41:9a:32:9c:e9:2a:1c:a8:12:a4:89:c2:39:83:db:48:
ec:03:2f:ff:d6:ea:da:57:50:73:d4:d8:88:f8:a1:c2:24:01:
37:49:3d:c6:5e:eb:14:14:f8:4b:d2:d1:f9:e8:7e:57:0c:bf:
9d:85:5d:b7:29:7e:2b:d2:a7:8b:f0:e9:5e:ad:50:5b:de:f4:
1b:0a:84:65:a8:3b:30:d0:dc:40:08:dc:bf:ba:22:5f:01:c2:
3b:85:79:2f:d2:6f:e4:07:4e:4e:ad:d0:8a:27:6c:d0:3a:7a:
49:2e:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:45 2025 by rpki-client