Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: Gc9ZE8o2KW7rEo5Wm/Yn4G1f+wwIA4n7L7vuv5wdXQw=
Subject key identifier: D0:81:11:98:D0:28:03:9F:9F:58:D0:A7:D8:2E:BE:17:7B:50:75:A1
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 0194BC05319A50C1848DEB14A8E2BEEE6575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: gldzytW7M7iM4tdWJ8srdtIC9/NBeLx3gJT9FfZYxtU=)
2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:31:9a:50:c1:84:8d:eb:14:a8:e2:be:ee:65:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=d0811198d028039f9f58d0a7d82ebe177b5075a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:fb:7c:20:04:df:b4:38:5d:86:07:af:54:
bc:36:97:4c:25:c4:92:17:24:db:de:bc:2d:03:b0:
20:0e:f8:7c:a7:b2:71:a4:0c:1b:4e:83:3e:92:6a:
d1:30:cd:b5:41:be:ff:4f:8f:53:41:2c:93:44:0c:
99:db:66:b4:5e:53:00:06:fa:4a:70:75:28:a0:49:
1d:86:e0:3b:65:ac:fb:bc:da:21:4f:b0:88:a0:db:
d5:82:4b:58:da:08:ce:00:25:4c:1a:c6:73:c7:94:
55:fd:53:13:5f:ec:f6:df:01:5d:83:9e:0a:39:e7:
7c:f0:5d:f8:4e:9b:5d:22:40:8d:35:b0:61:e7:63:
c8:7f:64:b4:55:7e:1d:6f:9d:d8:64:44:b0:30:e3:
f1:85:c5:6c:e9:ff:7d:3e:7f:ad:d6:91:f4:51:11:
63:44:b8:7d:9a:1d:07:bc:6c:bb:fc:79:42:e0:bc:
9a:ca:68:e9:b5:d1:f6:53:92:b9:be:75:60:f6:8d:
7f:5c:18:aa:fa:54:9d:b7:b3:47:c7:3b:f3:ee:e9:
b7:26:f6:42:a4:40:8e:7c:39:3d:ef:92:0f:8b:c0:
14:f9:71:e3:3d:2f:e3:99:7e:c9:2e:e8:47:8d:64:
d1:c3:bb:f0:16:9a:e3:b9:53:15:58:55:54:db:1c:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:81:11:98:D0:28:03:9F:9F:58:D0:A7:D8:2E:BE:17:7B:50:75:A1
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:3a:56:9d:ca:60:b6:10:4c:ef:e4:b0:df:83:43:f3:d0:
7a:4f:db:d7:e2:af:f5:9a:a6:ad:42:a8:c8:63:9a:c4:1b:aa:
31:99:97:2a:be:45:6a:e4:0a:cd:c0:cf:12:4d:16:57:85:85:
e6:b9:1d:66:c7:85:b1:4b:39:da:3e:31:53:0c:df:63:d8:fe:
29:b5:b8:c3:7f:1c:0d:ef:60:6b:4e:3a:2e:0e:c6:e7:ee:82:
bd:bc:3e:2f:ff:d7:6d:8e:c1:23:2e:8b:2e:77:6a:3d:3b:37:
bd:f6:f4:2b:95:c6:ba:52:32:c6:f3:d3:4d:9b:6a:73:83:ac:
ce:48:6e:2e:79:8a:70:f0:da:49:3d:03:f8:66:61:ab:67:4e:
4d:7d:f0:45:b4:09:07:16:25:66:58:20:2a:bf:f7:9d:6d:0f:
1a:c5:5e:09:ce:04:3c:44:11:09:1b:ac:27:26:6a:2d:19:99:
fc:7c:4d:f0:2c:b2:2e:38:fa:96:5f:8a:61:86:e0:eb:e4:86:
09:b9:df:01:b3:53:84:4b:15:69:83:7a:5a:85:4b:04:f9:3c:
41:cf:00:33:b4:11:40:17:de:72:17:9d:a8:da:06:a3:46:bc:
61:49:dd:b3:a3:30:79:61:f0:a5:70:e7:15:6c:bf:d9:b6:ea:
bf:1d:87:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:16 2025 by rpki-client