
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File: v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier: EdVWpI9IbPaxgJn9NTfi+kWQptycQtDfwgIcUJ9xvFc=
Subject key identifier: 51:96:4D:72:D4:73:2F:25:4C:33:CE:81:8A:74:69:58:5B:87:7E:28
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 0194BC3C69D26DBC68A37AC9490B81BDFDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number: 04C1
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: G7C4gHqdV9SzZasxnoLm19WM2K1HPKKyaP/aF8CUIm4=)
2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:d2:6d:bc:68:a3:7a:c9:49:0b:81:bd:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=51964d72d4732f254c33ce818a7469585b877e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:bc:90:62:8f:1b:82:a5:47:08:ce:b4:97:
50:a6:29:64:3d:39:ff:51:c4:83:4f:41:09:9d:fa:
06:8d:6b:3a:65:c6:05:0f:da:b1:ea:dc:3c:ce:50:
aa:a4:fc:32:4b:c8:fa:76:94:83:37:af:01:a8:a2:
40:90:89:a1:a7:c4:49:ab:49:8b:b6:13:5a:bd:45:
f4:95:da:1c:dd:8c:3c:d6:38:e8:ea:c4:dc:63:04:
d8:69:a7:01:8b:86:41:2d:af:af:ee:e5:fd:36:91:
e0:4b:30:91:62:82:00:c0:a7:0f:16:8c:4d:ea:e6:
54:4e:7f:f6:d6:0b:ba:b1:04:8a:52:36:76:bf:d8:
6f:0e:22:a8:62:03:c5:99:a1:a4:64:cf:55:c3:5b:
a4:ef:40:77:f3:ab:02:c4:e1:71:ad:d0:c1:a9:e3:
f5:75:84:f2:50:3b:f7:7a:26:f9:1c:97:cd:c7:97:
c0:8e:ce:12:7c:17:73:ac:92:c8:b1:5d:83:5f:46:
fb:ef:10:37:d1:40:14:41:f9:5b:c7:44:26:d8:6d:
1a:d8:12:a2:8c:8b:1a:05:42:7d:8c:fa:eb:8d:62:
ba:6a:d6:c2:82:fd:0f:58:ca:9f:6f:c6:4d:5b:23:
c2:bf:12:49:e2:78:68:0a:99:6e:fe:fe:03:fd:07:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:96:4D:72:D4:73:2F:25:4C:33:CE:81:8A:74:69:58:5B:87:7E:28
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:42:d5:a9:25:7a:e4:e5:2d:99:67:85:8d:85:a7:5a:0a:b4:
ef:c0:54:33:e8:81:d1:23:b9:ad:fb:1c:d7:3d:a6:0c:3e:3e:
ee:76:34:dd:9e:7c:eb:da:ef:a2:0a:31:d9:59:57:15:4e:63:
23:90:1d:66:89:66:48:d9:6a:2a:d8:2d:2e:ca:73:9a:ad:75:
06:bf:75:65:6a:7c:a9:bf:d4:1c:f4:58:f7:3c:68:e0:58:63:
e6:92:de:a0:d3:0e:56:47:17:61:d9:e6:01:91:ce:dc:2a:fc:
fb:8b:d1:71:07:21:cf:fb:f7:7b:68:47:c2:56:a0:b5:5c:00:
cc:0d:3f:90:26:72:35:dd:65:be:27:7f:e2:ac:cf:c8:9a:77:
85:f7:11:03:22:75:8b:57:21:1f:3f:cc:41:4a:00:e9:1c:42:
4f:57:c4:22:f6:8b:b8:eb:08:b2:de:79:85:38:f6:59:9b:ef:
d9:27:b7:95:fb:05:5b:32:bc:bb:95:a3:69:01:a7:24:8d:d1:
d8:3a:c6:95:58:6d:c5:00:99:eb:0c:8f:d3:84:7c:50:95:0c:
68:77:b2:25:96:f0:98:15:09:bc:fa:0d:b8:c4:91:91:21:98:
f5:05:a8:9f:dc:d2:67:7e:5f:69:56:c7:a2:3e:c9:90:07:70:
db:2a:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:35 2025 by rpki-client