Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier: LLOvsK+KcD5QGtro+yVRNcmRm67U5ZH94nrseDhdglQ=
Subject key identifier: 71:72:5B:F2:D3:66:5D:36:78:3B:BF:23:60:AE:DD:F5:F1:42:49:C7
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 0194BC3C578A7AED8C12EF86D928543CEBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: tx8YiQtKO9tfG5M8LXK5AUyo0v2L6eY1/kbelDBNIbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:57:8a:7a:ed:8c:12:ef:86:d9:28:54:3c:eb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=71725bf2d3665d36783bbf2360aeddf5f14249c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:c3:a1:72:96:04:2b:13:84:b4:c4:b6:54:
83:9b:40:b2:41:47:07:2c:67:8e:e2:8a:64:37:6e:
44:14:0f:db:33:5a:71:3d:f0:ca:0c:75:a3:1e:4f:
9e:0f:17:9e:e7:68:3c:a5:19:27:21:e0:85:e6:70:
37:a5:24:28:b6:ac:67:15:1e:e6:47:70:6a:82:f5:
f0:b4:40:3b:39:93:68:33:24:d2:88:00:db:e7:cb:
2f:b3:e4:59:54:25:66:1e:4d:c7:73:f7:a6:df:c3:
d5:ee:34:f8:57:62:29:f3:8f:f5:82:88:ae:3c:6c:
b2:8c:96:7d:bd:7f:9b:9a:86:8d:75:02:0c:15:1f:
15:4a:2d:24:a9:f0:06:d9:5e:fc:c9:7b:0f:8e:c6:
f6:51:68:9d:df:4b:82:55:78:79:2c:c6:b8:be:ab:
11:5d:b3:cb:10:28:44:21:b4:3d:21:4f:2b:c7:60:
d5:a6:4b:ed:52:05:15:dc:eb:12:98:78:1a:45:69:
40:c5:8d:59:cc:f5:1d:1a:62:c0:67:60:24:fe:f8:
ed:cd:8b:6d:05:a6:78:0a:04:35:fd:70:1c:e7:5a:
b8:88:cb:e6:e8:dc:6a:dc:cb:47:17:a1:29:e2:b7:
70:6d:19:a4:e4:a4:c1:bc:57:e3:7a:e7:c4:a3:56:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:5B:F2:D3:66:5D:36:78:3B:BF:23:60:AE:DD:F5:F1:42:49:C7
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:80:c8:27:a0:d7:7c:49:1e:26:b9:58:95:ab:c9:1a:ee:
9c:81:91:61:92:09:e8:2b:b7:51:37:f8:a7:c7:58:59:94:66:
94:32:85:2a:dd:a6:b0:34:88:de:fe:8b:ba:88:c7:90:6f:7f:
9c:2f:74:e7:e8:18:8d:46:09:47:a4:4f:fd:b6:3a:50:cd:9a:
f1:66:99:3d:2f:53:ed:b4:9c:c1:e8:75:30:c8:d0:a5:eb:85:
49:57:d3:c0:52:18:73:37:79:d5:e9:c2:8b:b2:fa:4c:1d:c4:
f2:ba:6a:a1:e4:1b:d2:6e:10:b9:2b:b4:b9:a0:86:c7:f0:d1:
e3:a2:a4:95:db:92:0b:e8:32:87:8f:ec:73:34:55:91:db:e6:
77:c3:59:a6:06:87:1b:5b:ce:85:50:11:97:de:43:6a:f0:03:
44:6d:43:e6:29:d9:91:bb:53:c6:54:02:fe:b4:85:29:73:9a:
ee:c4:6e:ce:30:1a:23:8f:2c:d2:22:16:2f:7c:0c:7d:92:f7:
c8:57:1d:af:f3:98:9f:dc:47:7f:f6:df:53:ef:60:00:5c:2f:
42:07:8f:97:fb:a2:c4:ce:96:45:66:8c:be:e7:a5:82:c2:25:
49:a2:90:1f:bb:cb:16:66:e7:34:a7:4b:dc:a6:cc:88:a9:fb:
b1:1c:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:11 2025 by rpki-client