Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: GA5ZrOrdt3IKkjSTPduzPpNkh6JhILBQzwgriTwKHMs=
Subject key identifier: D8:D8:FF:E7:D3:59:F7:3A:E6:1B:27:8F:89:9A:61:E3:89:F0:81:41
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 0194BC3C695EA9841F8C8AFE61B5A98AB514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 07E9
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: 9QCQ1ohfJrTsYzPOWDdzBENnZE83G+WL+Bi2kJBP7xY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:5e:a9:84:1f:8c:8a:fe:61:b5:a9:8a:b5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=d8d8ffe7d359f73ae61b278f899a61e389f08141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:e1:0d:bb:6a:e0:ac:8f:d2:35:df:fa:3f:
72:25:c8:cb:a3:ac:dc:19:44:4f:22:fc:af:41:87:
84:0b:f2:00:28:97:0c:f9:37:1c:01:c9:d7:ad:43:
43:97:00:1d:47:95:1d:24:02:45:89:7c:dc:fa:78:
71:cb:38:e8:11:53:d8:6f:4f:14:ab:55:93:79:f7:
3d:93:95:95:47:5d:20:f9:ae:94:46:bf:ec:43:7f:
e5:38:23:bb:ff:23:9c:84:c9:12:b1:1d:7b:2d:f6:
36:3d:e2:86:a6:79:2f:4b:a5:d2:05:20:42:c4:4a:
d9:18:08:d6:82:1b:86:d4:c1:a9:e9:b9:74:8f:2e:
4d:2e:a5:16:3e:e8:bc:e9:d9:c1:43:71:de:f2:a8:
cb:bd:27:cf:fc:c2:2a:5a:85:46:2f:95:75:10:1d:
50:4c:c5:d9:03:8e:33:08:5a:06:49:03:26:39:1e:
32:9f:ff:59:e7:57:46:c2:8c:e2:cd:e6:4d:20:a7:
c7:a2:a9:c2:6c:b2:ef:cc:d8:3d:b6:0d:51:8c:3b:
74:d2:e8:b4:36:e6:e4:ca:15:a0:6a:4a:3c:44:a2:
fd:e0:2b:c4:30:be:10:83:ad:a0:b8:8c:df:3f:fe:
77:29:57:c6:df:37:b7:8a:e1:69:ce:64:f1:16:df:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:FF:E7:D3:59:F7:3A:E6:1B:27:8F:89:9A:61:E3:89:F0:81:41
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:12:01:86:ab:37:ed:00:01:29:e6:fe:54:a4:61:c3:a4:73:
a0:cb:79:ea:31:38:4d:33:ba:0f:86:6c:51:0d:f4:52:93:38:
ad:5c:a3:f6:be:6f:17:27:7f:0b:4d:c0:99:e5:8a:3f:f0:a9:
6a:73:9d:25:3d:f0:98:3d:1a:33:d2:8c:03:3d:95:f6:a7:46:
f9:cb:57:7d:00:47:60:fe:eb:f6:70:f2:48:a0:a9:a7:6e:97:
5f:d0:b2:ae:7f:04:f1:37:4b:56:4f:7b:db:e3:f4:14:66:a8:
91:bd:3b:17:e1:d2:0f:b9:15:7a:0e:0d:ab:06:34:a0:f6:57:
36:b0:3f:a8:92:34:7f:a1:79:f2:a0:be:1e:57:cc:a1:3d:3d:
49:13:bb:9e:27:61:48:95:5e:44:e5:84:79:73:08:4a:78:81:
0a:96:c9:b7:1f:ee:6a:5e:c5:f4:7e:76:81:e5:54:e3:ee:94:
e9:79:d9:24:08:54:85:18:28:1d:ac:b3:c5:89:f3:dd:97:7b:
58:2a:5d:22:2c:93:a2:a3:80:af:32:88:be:30:fa:e0:9e:6f:
d9:a2:23:49:d4:10:0d:87:6a:14:ad:b8:13:1b:ee:f2:47:1f:
96:ca:08:08:ca:c0:57:04:93:fe:31:ef:2e:41:55:fc:48:f7:
a8:66:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:46 2025 by rpki-client