Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: MrIjW27yBdxVq2+eXdlkspZXfS+eGn1Ski/8nVGRHs0=
Subject key identifier: 89:16:D0:F3:6F:A5:AD:CA:AF:82:37:ED:C3:EE:40:29:26:2E:36:44
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0194BC04E475BA6DF71DC8C13335D50FB16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (hash: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=)
2: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: 4286+8JDE71FvPZAHqjrM/nGBGemZpu2NgJ57Lta+IQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e4:75:ba:6d:f7:1d:c8:c1:33:35:d5:0f:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=8916d0f36fa5adcaaf8237edc3ee4029262e3644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:89:db:c5:8c:5f:a1:36:07:1c:dd:09:b0:
2e:c1:ef:38:2d:f5:c9:b9:96:a8:ef:04:20:2e:b8:
83:a3:e4:60:d1:b0:33:6c:1d:a2:85:d4:8d:93:70:
4f:90:40:ed:23:fd:9e:6f:30:ed:23:fe:3e:62:c4:
fb:7e:58:be:81:cd:8f:28:c1:6f:87:03:ef:fd:e9:
5f:35:bd:c5:36:88:e2:1d:d8:40:15:63:69:16:57:
d8:ca:03:69:6a:86:6f:ae:65:93:de:75:2a:39:50:
df:99:43:14:94:ec:c0:4f:d1:89:fc:fe:23:7d:cb:
f9:a0:46:5b:00:45:8b:bd:48:10:07:c3:e3:b2:63:
3a:2c:5b:23:ab:af:9a:0e:d7:97:08:9f:41:ed:d4:
43:a9:d8:d0:27:89:89:d9:2b:4d:06:f8:d3:3d:8c:
07:91:5a:e5:4d:71:7c:7c:b8:e4:3d:13:51:91:4b:
a7:87:1e:8d:b8:45:ba:41:1a:63:6d:00:a7:9c:70:
09:96:d4:84:17:8a:26:ec:91:ae:f2:44:53:ea:97:
d8:a3:e6:d1:31:0f:40:56:b8:0b:27:f5:6d:96:16:
e7:29:b4:96:24:e4:3f:d2:61:c1:ef:4b:ec:a3:f3:
ea:60:d2:c0:ea:21:69:95:9c:93:ed:9e:3a:70:7a:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:D0:F3:6F:A5:AD:CA:AF:82:37:ED:C3:EE:40:29:26:2E:36:44
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5d:ac:9c:70:a9:2b:2e:4a:3e:ee:48:47:2b:e9:b6:3a:15:
94:52:69:9d:b0:12:84:3b:33:51:49:88:99:c0:d7:a2:7f:87:
bf:f3:7b:b3:84:f5:60:66:41:e0:a2:b4:cd:62:41:92:be:7b:
0e:91:86:97:47:c5:8f:b5:ea:97:e6:a7:b1:cf:b9:a7:dc:94:
1a:bc:4c:11:56:bb:a5:0c:ab:f4:4c:78:e0:ab:b2:58:0a:23:
a0:21:23:08:39:a5:e3:7d:e2:89:21:42:4f:f0:61:5e:40:3e:
f8:e5:e2:40:68:0e:7c:db:27:e4:6f:e1:d3:65:4d:49:24:1e:
b9:2c:57:b2:66:4f:18:6a:47:16:06:30:48:a1:7c:7a:0c:7a:
20:08:99:1c:34:f5:2b:58:a9:bb:48:92:f8:12:6c:14:1d:c8:
8e:bd:b7:87:bd:5a:cc:02:89:e3:59:73:5f:17:6d:8b:51:8a:
37:d2:86:cf:33:05:42:ea:45:c5:59:db:1e:6c:8e:0a:f8:71:
26:57:e3:72:d3:46:9a:5f:ae:ba:2c:e0:8c:cf:78:8b:94:01:
b1:39:30:aa:7c:d4:2f:9b:1c:af:f1:0e:c0:b6:06:ef:e2:89:
4f:7c:d0:fc:38:7f:06:aa:a2:56:b4:91:57:84:0b:2c:59:91:
a8:ae:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:59 2025 by rpki-client