Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: ehSdrJ18vNddJ+qHNPBaYAlUxOw/DKW9f8l63BtUd2w=
Subject key identifier: 32:BD:73:7A:6C:99:AD:A4:45:E0:B3:57:48:0B:26:D0:68:86:54:96
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 0194BCE05A87B55BA877E3A7DF036289CAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: /qVc8gJ3IHWfZFuONnl7KPCeeGugim0LE79vNj2Za90=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5a:87:b5:5b:a8:77:e3:a7:df:03:62:89:ca:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=32bd737a6c99ada445e0b357480b26d068865496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:34:86:44:11:a6:b7:a2:2b:b8:21:d4:6d:
cf:fd:ef:82:5b:68:f6:1e:b9:af:28:f6:ac:8d:79:
8f:01:84:9a:e1:f1:b3:0a:f6:45:dc:6d:b4:b1:a5:
f0:28:d9:d5:ce:0e:5e:d1:57:7c:27:7e:22:c1:f1:
b3:ea:a2:2e:32:4f:d6:44:de:36:2f:ba:c6:f7:b9:
fb:da:0a:cf:c1:03:6d:2f:fd:b7:94:7c:6f:8b:fe:
29:42:b5:bb:d4:33:a1:42:ad:93:2d:9e:c1:9e:74:
7f:a5:38:49:96:02:4f:0c:25:50:44:8c:bc:a3:d8:
86:3a:58:93:e0:88:cd:8b:8d:cf:ee:57:16:4f:bd:
a3:c0:e7:06:66:24:f9:c8:9a:f4:04:d6:93:08:25:
d9:55:82:0e:c9:4e:60:ea:4e:f7:f6:8e:a2:74:70:
61:34:3c:12:21:6c:0b:56:18:4a:db:dd:1b:1e:33:
4e:43:9d:60:21:b3:0f:fd:b6:be:98:7e:9d:69:3e:
6f:b2:f6:74:5d:d3:81:2f:18:56:fa:1c:8f:19:f6:
47:69:b5:8d:3b:69:98:c5:e2:9d:7d:e8:a5:c7:01:
c4:d1:75:3c:49:b1:b4:0b:c7:29:df:89:b2:32:e9:
82:76:7b:20:9c:66:61:f3:59:32:ee:04:55:23:b1:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:73:7A:6C:99:AD:A4:45:E0:B3:57:48:0B:26:D0:68:86:54:96
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b1:d3:b3:e3:72:b6:f7:33:70:6e:08:d7:32:72:68:e1:92:
71:13:18:2c:b3:d6:58:d9:20:c5:47:4e:1f:1d:a9:6f:27:5f:
23:96:87:42:be:00:86:04:52:f8:da:87:49:a3:13:6a:1d:a9:
3a:e0:f6:51:7c:47:0e:02:78:f9:98:56:65:67:a2:c9:ab:f1:
36:62:c6:f6:ed:f0:76:a9:ef:92:e9:db:27:16:be:a3:2a:83:
59:8c:9f:da:6c:43:82:fa:2b:f1:50:d1:bf:b6:4f:c6:e6:c3:
e5:c1:0b:43:10:30:2c:92:f7:ce:65:4b:50:a4:c2:9a:17:b0:
44:82:55:ba:08:3c:b4:9c:d3:ea:1f:f1:3a:d6:18:2c:7e:8d:
a6:79:40:22:fc:98:3f:8d:41:4d:3a:6b:02:53:35:85:8c:3f:
7c:59:1d:e7:27:26:98:4f:c1:d7:2e:0f:f1:7b:f0:17:3b:6e:
75:88:6d:22:c4:50:30:1a:5c:58:5f:c1:55:21:7a:13:51:5d:
cd:ec:c0:b1:07:67:de:9b:35:30:67:82:61:d0:cd:40:0d:bb:
b1:30:7b:5e:10:37:4d:31:65:aa:f7:f6:a2:4c:f6:bf:6e:54:
b0:1c:d2:bd:53:b4:3b:dd:24:45:78:d2:88:9e:f7:6e:f1:91:
a7:a3:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:01 2025 by rpki-client