Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: QwGOj3m8a4lUixrKyll2APxAvzOufKb0Nt10KfMyO0U=
Subject key identifier: 57:BB:9B:D1:19:5E:BD:1F:89:30:F1:FD:88:FE:5B:1E:C6:B0:4E:5B
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 0194BC04C9BF4B53F3B84517DFC1D43B925D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: c7ikr+UHAxX1Qb/8ydZQ/HNdYYOXE4ALpoQrpYbp3VM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c9:bf:4b:53:f3:b8:45:17:df:c1:d4:3b:92:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=57bb9bd1195ebd1f8930f1fd88fe5b1ec6b04e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:1d:e3:f6:d1:38:eb:d2:79:dd:b0:70:73:
91:87:12:a6:2d:ae:5e:4b:8b:c7:31:5a:7a:29:cf:
d8:e4:ee:e2:b5:8d:7f:d7:1d:93:66:0f:2d:3a:ca:
67:9c:9c:ad:85:40:0e:9b:d3:d8:5c:fa:58:78:d9:
1b:90:69:13:b5:51:7e:ad:48:5a:7f:dc:b9:0d:60:
9a:be:9a:64:4a:c9:88:56:98:8c:f7:ec:00:43:6c:
ad:ee:9a:0a:33:49:24:cc:3f:aa:9a:af:c4:a7:43:
f7:e1:06:bd:be:21:58:9d:7d:7f:68:d2:a8:1d:9c:
7a:9d:eb:9e:83:09:69:b3:f8:7b:5f:93:4c:fc:39:
69:a4:a4:d9:47:1f:94:28:66:28:0a:45:2e:91:aa:
d2:41:f1:17:79:e6:bd:98:2c:ff:b3:87:78:c9:50:
f2:17:33:18:69:09:44:20:89:53:dc:89:6d:af:f5:
fb:82:45:79:2c:cf:b0:1b:5b:ca:9e:91:c7:88:03:
b7:46:01:a7:75:ca:cc:66:29:64:d1:93:0e:ff:71:
1c:f5:78:14:c6:f9:ef:88:9a:d6:ac:a9:c2:47:a6:
e7:c3:69:c1:fd:95:8d:a4:c0:8f:c8:c5:bf:4c:93:
37:a8:a3:a7:1c:7c:e0:09:a6:ab:a1:70:b2:06:97:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:9B:D1:19:5E:BD:1F:89:30:F1:FD:88:FE:5B:1E:C6:B0:4E:5B
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:a2:9e:a2:22:23:c9:da:87:83:bb:46:0c:1c:f9:d1:1b:
aa:65:47:0f:08:14:74:dd:06:10:37:1a:fd:b4:25:1b:70:b6:
9a:6d:6a:1d:20:36:f9:1c:19:f3:fe:39:09:cc:c2:2a:3e:70:
8b:39:3b:d9:00:f4:81:71:41:80:5f:33:46:ce:bb:95:23:86:
b7:2c:1d:41:e0:08:a3:0c:e0:46:27:35:90:e1:f3:a6:a8:5a:
b1:88:36:c1:6e:94:2a:c8:29:82:9b:3f:00:bd:94:e9:7c:c7:
fb:01:d0:4d:7b:55:e9:8c:ab:36:bf:53:42:f0:e5:b5:03:f8:
3f:e1:72:95:c4:1f:0e:c2:3d:1f:ac:db:7d:4b:55:52:0e:65:
45:6a:97:17:81:b7:48:34:f5:16:b6:2e:07:07:42:f5:b0:40:
4f:da:df:3e:df:98:af:06:eb:98:1a:44:7d:13:91:1c:b1:db:
cf:74:1e:e0:80:d0:a5:df:a2:99:f2:ff:38:6a:2d:55:95:3f:
56:de:d5:56:c2:f8:36:a6:b9:b3:f2:57:64:ce:5b:d4:fb:87:
0f:81:a0:bc:63:b4:50:cd:ee:33:b9:77:55:9e:0d:ef:10:7b:
b7:87:dc:5b:8e:5a:30:47:b6:04:3b:1b:be:a7:73:c0:9b:49:
2c:f8:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:48 2025 by rpki-client