Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: zdOu5reeoaCilSV6MpPD6AXE6UAhqMSYgjoJ7gp3zXg=
Subject key identifier: 4C:2D:97:AD:FB:48:9F:01:08:45:EE:FF:76:16:8D:49:CB:4D:AB:A8
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 0194BC04DE138E1EA59F2ACEA20034460D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: 6EaEHPohPYoAhudcYfChwYjfiPqAPV7yNdUQKM3iKh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:13:8e:1e:a5:9f:2a:ce:a2:00:34:46:0d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=4c2d97adfb489f010845eeff76168d49cb4daba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:a3:a5:1f:9e:6b:13:63:ca:6a:3d:ce:89:
8e:f3:b2:48:4f:03:cd:be:90:ca:21:d7:a0:3c:ff:
32:f4:ed:d3:2c:a7:09:9e:76:4d:1f:b7:f9:8d:95:
de:b2:94:12:17:9b:f1:5e:31:26:da:ca:5b:1f:1f:
e6:bb:25:6c:77:d2:a0:79:93:b0:5d:2e:d6:b8:c9:
27:9c:10:99:cd:a3:c5:86:64:02:0e:13:67:57:05:
17:44:5c:d9:20:4b:6c:42:38:b1:33:d2:8b:29:b8:
05:d6:56:3a:e7:92:5d:b5:21:66:65:57:f2:e4:28:
2a:07:0b:e8:43:65:be:76:3f:48:48:e3:b9:cd:fd:
00:fa:21:87:be:6f:bd:4c:4d:63:ba:1d:e2:19:43:
ee:cc:a0:a1:4f:bc:8c:2d:d7:49:cc:9a:78:a3:03:
2f:a4:db:b0:d4:1d:44:66:8b:79:3a:4f:af:a1:68:
5c:88:ce:7d:9e:64:75:0b:55:a6:60:87:fa:ff:bb:
bf:0a:81:82:52:5f:91:3c:29:ad:f8:71:0a:fa:be:
f1:6d:dc:a4:73:f5:74:75:68:44:5d:26:77:f2:a5:
b2:be:a8:f4:54:24:a0:cc:40:cb:9b:38:37:14:9f:
72:1e:e3:e2:90:2a:81:b1:e9:bf:f0:81:de:d9:b0:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:97:AD:FB:48:9F:01:08:45:EE:FF:76:16:8D:49:CB:4D:AB:A8
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cb:5c:42:bd:f3:f4:01:50:b3:6b:ca:e8:bd:14:1d:47:ea:
cc:89:89:02:0a:12:6c:64:f8:68:fa:1d:6d:98:ef:11:23:a3:
d0:e8:9e:99:63:70:bb:b0:e6:fd:28:42:d5:34:0b:9e:41:6c:
04:b7:0e:98:0c:90:0e:f3:f5:5d:4b:4b:ff:15:1c:d6:3e:1e:
8d:7e:a5:65:3b:91:e0:92:5a:16:0d:af:c7:3c:ab:86:d9:a2:
db:ac:66:a5:5f:57:39:d3:31:aa:54:d8:b3:09:63:69:58:39:
a2:96:b4:1c:5e:cc:65:c8:83:a0:b4:cc:6f:6c:9a:45:62:08:
f4:41:80:62:e4:fa:5c:1f:7d:97:8c:37:89:59:0e:60:2b:07:
10:2e:d6:ae:98:7d:25:65:33:43:84:45:52:46:f9:75:50:42:
49:60:04:1c:63:6b:a6:2b:01:ec:45:41:a8:cd:78:6b:12:11:
5f:eb:d2:d7:96:75:7a:94:47:7d:78:64:de:3b:c9:04:7c:e1:
bc:0d:00:8b:24:87:d5:19:0a:59:0f:4b:17:42:a2:c6:7c:f1:
a6:2d:d6:fd:9d:3d:cf:47:87:df:68:08:7a:fc:b4:d2:d5:47:
99:10:06:02:c8:c2:90:42:97:48:c7:28:ee:4f:73:95:b4:ef:
6a:42:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:18 2025 by rpki-client