Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: ENQRnzLHTu+ISEKrrcT19q1REAteVGmf9OIBfjG9UYA=
Subject key identifier: 2C:89:E7:E3:CF:36:48:0B:89:7D:EB:2D:E6:6E:31:B4:44:06:5E:56
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 0194BC3CC5A9917464776E05E78319DC7C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0AE5
Signing time: Fri 31 Jan 2025 12:01:26 +0000
Manifest this update: Fri 31 Jan 2025 12:01:26 +0000
Manifest next update: Sat 01 Feb 2025 12:01:26 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: vxmJD9sk/cEO5i4G34jkYp/HkJGtF2Bw6kN5G2yN5NY=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c5:a9:91:74:64:77:6e:05:e7:83:19:dc:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jan 31 12:01:26 2025 GMT
Not After : Feb 1 12:01:26 2025 GMT
Subject: CN=2c89e7e3cf36480b897deb2de66e31b444065e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:93:d7:e6:c6:67:43:22:45:12:36:62:76:
4e:a3:7d:2d:c6:58:6a:d6:2d:52:fa:42:f3:f2:2e:
64:d5:d7:6f:d9:a1:4a:e6:c0:b4:d8:f4:f9:a2:d8:
4a:d1:a7:4a:35:32:07:cd:58:6f:85:1f:0d:f6:e6:
ce:14:53:e0:51:f2:3d:5a:15:7e:3d:e4:cb:86:9e:
37:70:7c:a6:77:84:34:41:b7:99:b1:ce:79:e2:a8:
93:71:3d:be:ea:e3:e5:bd:48:20:af:08:da:3e:34:
ff:b3:82:0c:42:b2:9b:f6:c3:dd:f5:d9:e7:d7:b2:
8f:33:6e:92:b2:96:41:94:0c:a5:98:86:b6:30:9c:
e9:1c:0a:6d:81:e3:2c:1f:ba:77:bf:43:5b:97:91:
d8:4a:0e:1b:a0:ec:ed:71:d3:b9:7c:b7:bd:4d:8c:
fb:bf:62:29:ce:10:26:ad:1b:3b:45:04:70:30:31:
f2:19:ba:06:84:60:1d:9b:4a:d2:d3:2f:63:c7:5c:
09:bb:6e:74:d8:8f:d5:f1:e2:5c:20:fe:60:fe:93:
0e:5a:24:04:d5:d9:60:f4:1e:1d:73:23:eb:85:d2:
9d:51:20:ac:10:e4:47:9a:2e:62:b8:60:8f:82:96:
d6:e7:8d:81:3a:c4:01:69:75:7f:78:c8:e6:0c:44:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:E7:E3:CF:36:48:0B:89:7D:EB:2D:E6:6E:31:B4:44:06:5E:56
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3d:e7:1d:d2:16:59:57:a9:d7:0e:f0:fe:84:55:09:94:62:
e0:3f:b1:d6:c8:60:f4:dc:c4:68:e3:64:f9:b7:e4:9c:b9:85:
7e:c8:5a:df:5b:e6:1f:65:a2:55:14:fc:8b:a7:50:22:aa:f3:
c6:47:95:39:a7:f2:41:e1:b5:c5:3c:11:dd:2c:72:72:29:64:
2c:c1:a8:99:99:c6:c5:b0:4e:91:fe:ee:7a:8b:ec:3f:e0:dd:
ec:8b:86:13:a3:58:0b:54:aa:8a:9e:62:a3:74:9d:91:74:ff:
10:8d:5a:3c:e1:70:cf:02:1f:43:a7:f2:eb:27:e0:ec:64:fa:
97:8c:5d:ec:03:07:1c:20:bd:aa:e4:8c:90:c8:73:62:9a:7d:
34:48:a6:5b:01:9a:43:58:67:87:39:72:61:23:6b:8d:18:79:
3d:2a:53:15:a2:80:aa:41:d3:c0:d7:a3:7e:73:72:f1:0e:e7:
79:42:b9:41:19:58:f5:af:68:e7:22:14:99:79:b0:b2:77:16:
8e:81:5d:e2:96:42:b1:0e:72:7d:f6:80:95:30:cf:e8:cf:c9:
20:ac:bd:cc:6e:c8:e5:82:b3:3b:ab:2e:4e:86:eb:28:b5:25:
0a:36:9a:09:fc:c7:59:6d:b5:8a:21:09:dd:a2:26:52:ab:41:
1e:6c:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:54 2025 by rpki-client