Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: 3ZJQTXbRmDCTGGZebKQ2RNCLhCnyOFd9wmmP/s+eBUA=
Subject key identifier: 2F:A1:78:60:60:3F:8B:E8:51:8E:68:0C:ED:C2:03:66:C2:2A:E3:18
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 0194BCAA364DE16548FE51B836078FDDC995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 04D9
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: GwPPJnpeeLyet+OnyedypaX45IPExteXd6Hzm2fILMY=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:4d:e1:65:48:fe:51:b8:36:07:8f:dd:c9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=2fa17860603f8be8518e680cedc20366c22ae318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:da:02:cc:40:01:0b:13:e8:9e:e7:06:24:
b1:7a:8c:a2:58:d9:e5:ed:98:87:a1:db:41:08:36:
22:0d:de:ba:05:04:1a:79:b7:12:0e:9c:82:a2:2d:
7b:7e:05:8a:7b:27:4c:f2:a6:42:0b:c3:1d:54:ab:
06:cf:bd:7a:98:ef:48:32:1d:d2:a2:1e:c4:53:25:
58:ca:50:63:d9:49:35:b0:47:9b:31:e4:e1:ba:e3:
e8:b3:32:dc:3a:57:0a:b2:4a:f2:e2:a7:52:f4:47:
bd:7a:27:6e:a0:68:49:77:91:e0:ec:85:c5:e6:3b:
9c:9d:9d:33:de:0e:47:23:7c:6b:33:8d:7b:95:45:
8a:97:51:bd:83:e9:43:75:8c:41:41:ba:87:11:07:
8e:af:17:fb:fd:69:7e:21:51:14:21:91:d6:09:13:
4e:c0:ad:88:19:8a:e5:55:c4:fe:aa:8b:90:53:71:
dc:b3:d5:f5:0a:da:3e:4e:6a:f9:72:1e:2d:c4:6e:
d4:8a:8d:97:20:12:14:fe:17:25:e6:1c:16:a4:f2:
56:70:c3:50:82:d0:ea:ac:1b:dc:4c:bd:38:f5:92:
63:63:6f:80:cf:a5:c4:13:01:4e:10:68:4a:e6:eb:
af:2e:ff:61:9a:34:fc:b3:38:2b:48:7a:24:25:c7:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:78:60:60:3F:8B:E8:51:8E:68:0C:ED:C2:03:66:C2:2A:E3:18
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:20:7c:ee:7c:8e:ae:02:94:50:14:b0:80:74:91:f0:df:
54:ad:53:b4:ca:d0:a5:0b:ad:94:70:96:00:a2:fd:97:c7:01:
53:22:cd:c6:75:e7:a9:40:5e:7f:2d:3d:08:f6:9a:9d:73:59:
13:8b:48:b4:36:98:4d:a0:81:6c:ac:10:51:aa:b2:c6:8c:cf:
ee:81:06:4b:b9:21:1e:72:f8:b6:88:c2:2b:de:8a:63:17:6b:
d3:8e:d1:9d:0d:ec:34:63:0b:bd:a1:98:a3:76:13:41:d0:97:
85:3c:3a:b0:b7:78:30:1d:94:73:37:de:9f:aa:65:67:af:25:
81:fc:b3:10:0f:07:c6:49:77:22:ae:e5:66:1f:dc:c0:68:45:
d2:f8:20:8b:72:24:aa:91:5d:53:82:ee:46:ee:e1:25:e8:a8:
6d:c5:a1:a2:f6:3a:4c:81:68:35:8b:fe:eb:ae:cb:e3:2c:41:
aa:2e:07:d1:4c:dd:3e:85:f5:98:f1:50:42:ea:78:9f:0e:37:
09:bc:25:a8:b0:6f:54:3a:6f:24:21:1d:95:b9:90:c9:83:39:
03:27:78:06:b1:dd:9c:c0:b4:02:18:05:cf:38:0b:91:bd:25:
48:30:1a:56:95:1f:68:66:dc:92:67:02:20:f7:aa:af:97:f0:
e0:04:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:49 2025 by rpki-client