Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
File: __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json)
Hash identifier: ouNuKfVN9OWBzMimF4Aztd75MfuakxQB1QHWW+3PP8c=
Subject key identifier: 15:91:B1:70:7B:D1:76:F6:5C:A4:94:47:E1:99:E3:86:AA:A0:68:71
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial: 0194BD4E613CB93A6108955439E7F437CCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: 0gxhBVOxmLTL4KUrIOldxXoH9tgfOq2Mg64rCE1hlGQ=)
2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:3c:b9:3a:61:08:95:54:39:e7:f4:37:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=1591b1707bd176f65ca49447e199e386aaa06871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:13:a7:0f:a2:51:e4:e5:f9:a8:8c:5d:4f:
5c:3b:9d:02:79:9d:ff:29:e4:01:70:9d:24:f4:ac:
9b:9b:d3:73:bd:eb:32:14:08:8a:21:08:e5:93:fb:
f1:17:73:5f:a0:ff:3a:17:21:b1:54:39:4c:ef:6c:
7c:72:31:4b:6f:1a:59:01:ca:11:1d:60:34:2b:61:
71:10:ab:ed:24:b9:e2:68:28:40:89:d0:3a:57:6b:
77:59:ed:7a:9e:5c:2f:5a:6f:b0:ef:bc:29:c6:3d:
c7:85:bc:48:6b:70:5b:08:41:9f:69:10:17:19:d4:
47:02:6d:20:cb:c9:0c:66:cc:6e:57:cb:9f:13:ae:
15:a8:2c:72:a0:da:8a:d7:47:56:df:40:b7:87:7c:
6c:0a:36:44:f6:b5:6b:ae:90:45:98:88:ca:be:9d:
bb:1f:2f:8e:a0:d0:46:c1:1c:d1:cd:42:c1:07:48:
93:24:d4:b1:36:7b:9a:2e:ae:c6:da:f9:d5:77:1d:
56:71:c0:8c:08:80:47:b7:d3:55:62:b1:41:9f:96:
6a:54:8c:15:77:11:80:3a:9b:cc:1b:11:8c:c4:b2:
cc:41:64:25:fb:bf:3c:a5:1e:b4:3d:df:58:6d:de:
b7:13:97:32:3d:c5:95:63:41:cf:b4:1b:fc:8e:28:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:B1:70:7B:D1:76:F6:5C:A4:94:47:E1:99:E3:86:AA:A0:68:71
X509v3 Authority Key Identifier:
keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0d:63:fe:43:26:5e:39:fd:d8:c3:a8:53:2a:c8:4a:35:54:
a8:fc:a2:ab:e3:79:b7:1e:9f:c2:08:3a:66:1c:57:ee:e9:07:
41:a5:f3:d1:fb:74:00:4d:f6:17:1e:e8:a5:46:66:65:ea:33:
da:d1:a1:91:88:fc:10:c0:5a:0d:05:9c:93:24:b1:a4:9f:2e:
3b:bb:54:86:d2:3a:2b:95:6b:ea:74:7d:bd:e8:14:58:6c:0b:
22:46:d6:f4:62:31:50:27:5f:12:99:83:d0:b0:5f:9c:5c:80:
32:30:3b:95:1a:9e:b6:92:44:72:b5:0f:30:44:ba:d5:e9:d9:
30:fb:f8:39:b7:93:b8:01:5c:cc:60:74:d7:15:6b:c7:8e:61:
58:7c:17:6b:5f:58:ed:5a:f9:25:53:82:87:81:bc:60:45:ed:
b3:6e:8f:d2:10:a5:f2:d9:2b:e4:5c:c2:73:70:57:14:e3:8a:
2d:c1:49:75:87:aa:79:a9:29:e8:d0:5b:db:7a:6c:48:b2:3e:
5f:c9:49:ca:09:9e:48:d2:c3:56:d4:e6:b7:62:9b:19:dc:a9:
cc:77:57:4c:31:bc:33:0e:28:2f:bf:8c:b2:aa:96:b8:1e:5d:
8f:94:a7:8c:39:c2:8c:64:c1:bd:4a:de:89:e9:f3:a2:a0:ba:
e5:12:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client