Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File: rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier: 5M4Y7SnMXTyO35g9b8y/X7IAo9zkC+UBA8NMYQ1EraQ=
Subject key identifier: EC:20:22:19:6E:9D:C1:E7:15:0F:8F:A0:E9:B7:86:5C:B1:74:B5:00
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer: /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial: 0194BC04D7110ED910C7683A908A0975BD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number: 0AE4
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: wppdvmonnQzQ5HiLEmnyXE1kgPzPHcAIe2qxeXE/h+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d7:11:0e:d9:10:c7:68:3a:90:8a:09:75:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=ec2022196e9dc1e7150f8fa0e9b7865cb174b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:33:e3:6f:63:16:f8:d7:89:29:7b:54:0c:
6f:6c:45:fd:2e:6f:07:50:83:3a:c6:46:26:91:7a:
3c:68:84:c6:52:d2:72:87:48:e1:d3:52:df:8b:97:
e2:d5:a4:87:8c:58:18:18:b6:6c:e3:4a:4f:9c:94:
a8:6a:f4:26:a5:7f:36:df:eb:8f:7e:df:1b:e3:5d:
e8:7a:ec:57:71:e2:85:2a:a8:4b:35:05:b9:4a:1b:
73:41:c6:90:75:28:62:76:22:f1:0e:2d:c7:0a:4b:
22:62:43:13:47:e8:48:7b:00:cb:fe:7a:41:bf:cf:
21:81:3f:36:72:4c:0a:c5:51:32:52:12:a4:cc:61:
f3:72:3c:9a:fd:fc:f8:7d:3e:3c:07:f7:6b:16:61:
e5:9b:1d:a6:33:cc:b5:1f:07:0c:f2:70:6a:34:15:
f3:1c:a0:19:72:75:9c:a8:f7:83:06:23:3b:05:fe:
73:de:f9:44:d3:c3:1e:10:4f:a1:9e:95:e8:c2:3c:
96:37:08:ad:93:89:7c:2a:76:66:fb:9b:fc:11:9e:
22:c3:b9:5a:22:d7:82:cc:e1:8b:ca:b4:1f:eb:71:
9f:e2:31:4b:99:40:0d:0a:62:35:fc:59:e0:78:2d:
1f:9e:dd:bb:dc:79:bc:0b:6b:dd:44:02:cf:61:10:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:22:19:6E:9D:C1:E7:15:0F:8F:A0:E9:B7:86:5C:B1:74:B5:00
X509v3 Authority Key Identifier:
keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e9:d1:1e:b6:d2:c2:bb:e6:b3:e0:8e:06:dc:94:3a:c8:1d:
dc:cf:92:24:f4:ac:b4:37:c9:c5:b0:c7:7b:2a:4f:5d:82:50:
4e:84:cc:61:88:71:2c:b6:55:16:4b:68:f5:2e:cb:32:a6:96:
ce:3c:d1:10:41:8e:67:0e:24:96:ad:c4:33:71:b0:9a:f9:df:
4a:fa:f0:86:b7:48:23:95:46:3a:16:67:93:f1:e5:e4:d6:f2:
db:83:06:a8:a6:2d:53:01:81:38:a0:f0:27:60:bb:18:d1:69:
98:80:ee:93:64:b3:94:32:ea:dd:2d:38:65:9b:90:71:75:d2:
46:08:c9:0a:51:76:8b:c8:c5:44:e6:f5:40:dc:f1:4a:e9:80:
52:3a:4b:e0:21:8e:aa:14:97:b4:c6:d4:d1:c3:a9:f5:30:dc:
c9:62:3e:ab:a1:a8:ed:c7:60:ae:c9:21:ef:59:dc:29:57:c4:
22:cf:4a:13:ac:6d:47:c3:68:33:63:02:f5:b3:1d:f9:61:ba:
5a:96:3c:28:cb:96:76:ad:08:4f:4f:6d:37:5d:27:b2:67:34:
46:07:42:3c:e6:d3:35:f9:8c:41:05:0d:ca:5d:04:e4:1f:96:
d1:94:af:df:96:d0:91:f4:0b:00:86:0b:48:05:2f:c3:a5:55:
54:3c:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:13 2025 by rpki-client