Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: hQS7moJpbpaBkPT0ff+tXTMNqEwgSToKRwpei3KGuhA=
Subject key identifier: 3E:89:BF:8B:1B:ED:8F:A4:66:96:80:D0:B4:42:49:01:12:4F:9B:A5
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 0194BCA9BEB326508B2BFAA9328908D0B133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: FouZwzgzbBgk3/MxikH/5DOPND/aYsRMxQ+MyzwcFj4=)
2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:b3:26:50:8b:2b:fa:a9:32:89:08:d0:b1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=3e89bf8b1bed8fa4669680d0b4424901124f9ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:1b:4f:5d:4d:16:93:63:4e:9c:4a:a4:ff:
f3:47:66:5d:f7:44:02:93:dc:95:2f:07:aa:35:b7:
47:a6:1c:d3:e7:e4:6c:92:fc:df:d0:94:f9:71:03:
e9:aa:c9:71:83:a9:29:71:98:5d:35:52:8f:3d:42:
75:f2:28:3b:89:17:d2:15:2b:a9:f8:13:e6:a4:a2:
56:41:2f:0d:1c:5c:46:f7:c7:8a:0a:fa:c2:52:5c:
ab:b6:22:d6:13:29:8a:0d:92:6f:ca:23:5b:0a:d1:
91:24:4c:98:85:95:c8:38:07:59:ea:6c:44:e4:45:
c0:eb:ab:c8:d8:55:cf:d4:3a:71:a3:3e:6b:1d:7a:
75:cc:d5:c6:5a:6b:de:12:4a:47:6a:1d:34:7b:53:
89:07:49:13:d4:58:ed:7e:98:b8:ec:68:91:3b:e2:
70:ba:eb:dc:e2:67:0e:b5:09:a7:b1:8b:77:52:d5:
d4:4e:ce:4e:7e:f8:09:0a:10:63:7b:ea:d5:b1:bb:
7d:bc:b9:83:6f:4e:3f:7f:28:f3:11:74:b4:07:96:
41:d0:4e:f6:73:5c:c0:9c:30:dd:b0:e1:a5:46:40:
85:94:a8:4a:52:2d:26:71:31:4b:e0:a3:b5:91:03:
70:4e:50:b5:7b:60:51:19:23:25:ee:64:29:b7:43:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:BF:8B:1B:ED:8F:A4:66:96:80:D0:B4:42:49:01:12:4F:9B:A5
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c0:7a:d3:58:82:f4:f7:79:f2:fc:12:cc:21:63:58:33:93:
b7:cd:eb:21:fe:d9:3a:68:dd:1d:a5:24:2d:04:03:5c:ef:c4:
a1:30:fb:56:fe:19:e2:22:c1:ea:a6:89:8f:b4:05:c0:53:46:
c8:06:1b:77:c5:f3:92:17:47:d7:06:ed:02:9f:a8:67:b6:e5:
52:3a:2c:6d:5d:ab:9c:a0:17:a8:89:ff:da:57:cb:3e:cb:f7:
25:6a:e7:8f:fc:25:8b:3b:9c:bf:2f:68:99:3d:2d:b0:f2:c9:
f3:e3:02:e7:3f:26:e6:7f:fe:50:c5:77:f2:54:e5:05:3f:2d:
f6:c3:17:68:15:dd:02:4a:92:a3:b1:ea:03:0d:aa:f6:4e:25:
59:1b:50:2a:ce:81:31:61:db:d2:47:72:e9:d1:e6:09:0b:76:
47:c3:a7:df:8c:59:96:a0:4b:1c:cf:89:89:ad:f6:01:a9:d6:
64:28:0a:9c:4e:61:b2:4d:d5:95:34:39:82:df:2f:01:4b:51:
ff:74:f3:95:cc:3a:96:72:99:fd:d6:0f:8a:9c:a7:8f:35:18:
d1:99:2a:d5:4c:ff:af:6a:fe:ad:9b:59:4b:fa:c0:6b:3f:c2:
6e:83:12:20:f1:b6:41:64:75:7e:5e:23:ed:5a:f8:2d:05:e8:
e0:47:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:28 2025 by rpki-client