Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File: 65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier: rI21C9gRa+iGLx7bzBz9FQah89vxZXzzC2JRA8jjv/8=
Subject key identifier: AB:4C:D1:00:6F:54:7A:0D:8B:C8:DF:F4:F8:1F:45:9D:14:71:42:71
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer: /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial: 0194BCA99523D19D0FA15AC2D88E29FE413C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number: 095E
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: 3P5colONiDbs2fpcYfagay1H7J+cI05Ck88sjE9QHOM=)
2: JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (hash: vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:23:d1:9d:0f:a1:5a:c2:d8:8e:29:fe:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=ab4cd1006f547a0d8bc8dff4f81f459d14714271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:c1:f1:38:cf:26:cd:97:d6:20:3b:93:8e:
d5:e1:bb:6e:8b:30:2c:69:df:f9:ac:59:ed:88:d3:
43:55:1f:bc:7b:7b:b8:74:d2:25:f1:bf:21:5b:89:
14:6b:37:8e:ca:b5:58:7e:9d:9b:6c:bd:50:b3:7e:
05:c6:59:2c:d1:d5:7e:18:df:3c:13:80:63:7c:a7:
89:d1:66:31:94:87:3c:62:4b:e6:7b:04:8c:22:81:
f5:4f:a2:46:7b:7f:4a:eb:eb:5f:df:eb:d4:09:ad:
c1:78:cd:83:47:c4:b4:fe:e6:e7:b9:16:d1:25:a1:
c2:e2:18:a0:bf:72:69:c2:06:d5:d8:f1:4e:4f:2b:
f1:62:c5:3b:f4:3c:64:33:2f:cc:a1:3c:37:b3:a7:
97:5c:d5:6c:f5:4b:c8:a1:c7:32:bf:94:c4:f6:2e:
26:ed:6a:63:08:54:94:7b:67:66:b3:6c:24:7b:8e:
b5:31:43:b4:b3:3e:cc:e5:40:34:92:0e:72:cb:7f:
4a:1b:0d:55:ad:42:0e:3e:1b:cd:ff:d6:9d:6d:2f:
86:03:31:51:b3:c4:e8:4d:0a:5e:f0:bd:cf:8d:4f:
6f:66:40:91:c3:c2:d3:e4:18:bf:a4:84:07:4a:c7:
29:fc:fc:a5:9d:6e:f0:e2:19:b1:44:d5:c4:f6:d9:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:D1:00:6F:54:7A:0D:8B:C8:DF:F4:F8:1F:45:9D:14:71:42:71
X509v3 Authority Key Identifier:
keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:3c:be:72:01:7f:9c:32:9c:1d:ab:34:60:24:47:12:e2:
4d:cc:46:5c:3f:c9:a7:05:9c:3a:46:1c:bf:14:15:7c:52:2b:
a5:5b:03:f4:74:1e:e7:12:5f:49:50:e0:75:44:f8:37:f3:2e:
62:e5:3a:5f:02:0b:b5:2e:2e:e9:56:c8:a7:86:df:3c:0d:e8:
dc:98:39:d6:a6:b9:f7:3d:5e:47:09:97:b1:be:df:cc:a1:d1:
60:5f:36:07:47:10:21:55:99:fc:0c:9a:f2:81:a3:fb:2f:7e:
bb:42:44:ac:5d:30:4e:93:2e:05:72:11:41:f5:26:cd:f0:d8:
4a:f4:fd:30:1f:e6:ca:c7:42:a6:79:2e:5c:97:3a:90:15:6a:
20:cd:3a:cb:e7:3f:5e:5f:e7:3f:21:a3:c6:f5:11:b6:7a:7a:
18:25:26:4e:2a:cf:b4:7d:dd:4c:fd:e5:9e:27:5c:01:ba:a5:
b3:a7:05:fc:0b:4b:4b:b5:4e:e0:03:ef:67:a8:41:04:0c:01:
12:96:41:a7:6a:f6:5f:62:20:28:e9:9a:f9:8e:16:0b:29:91:
28:bd:85:6c:ce:bd:ee:99:cd:e6:4e:b9:b6:b4:98:0b:82:bf:
c4:53:ce:40:50:2c:b4:7b:06:33:5a:de:61:05:81:5d:19:46:
3f:89:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:11 2025 by rpki-client