Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: grgzLy2Bxy8uyogDHL0rDEwEVPnc4BIGRaljX8PsKOk=
Subject key identifier: AD:A1:BA:22:04:D9:23:02:15:4C:18:2C:B6:E1:CF:BA:11:5E:81:DF
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 0194BC72FE5E8F05B2619947EFA4753771B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 0CB5
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 4MA76DfptTfzcVu4Ev4bJXe1wsKOIZLfyGDLrCHA/iY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:5e:8f:05:b2:61:99:47:ef:a4:75:37:71:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=ada1ba2204d92302154c182cb6e1cfba115e81df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:bc:1b:ae:8d:be:f4:2c:93:ad:38:6b:fe:
20:70:b8:a6:15:b3:00:55:fd:4d:7a:26:56:a9:8d:
88:3b:d3:f8:a3:8b:d7:2e:5f:d3:6b:52:31:dd:bb:
6b:a5:4a:dc:3b:85:c5:24:7c:54:27:31:81:8c:62:
98:38:d2:3d:e4:66:c8:8e:0f:52:01:b3:21:0f:5c:
69:43:91:51:08:10:b0:ff:f0:5f:24:4c:01:c5:f3:
58:12:4d:93:4b:94:7c:13:6a:99:ea:d0:e2:dc:f9:
0f:be:e7:a7:50:7d:52:bc:6c:6e:a1:da:cb:f5:09:
8b:44:75:0d:e1:8d:49:3e:74:c4:d2:6d:af:e6:54:
7a:19:40:60:f7:32:39:cb:7b:44:7c:4c:89:53:95:
74:09:f8:49:48:ea:b9:ce:f1:9c:f4:98:64:e0:3a:
30:b9:a6:d1:d1:5b:5d:e4:b8:9c:fc:b3:3e:40:d3:
48:91:3d:d8:e0:be:84:8c:df:b3:55:e9:6b:ee:a4:
0c:1d:7c:65:bc:71:ad:e2:7b:a0:7e:ad:12:f9:88:
9a:7e:d0:15:5a:78:09:02:4a:67:eb:b6:d3:af:98:
e5:db:6f:68:2f:94:33:f1:33:9c:98:03:33:8c:37:
b6:73:d5:e0:2b:f1:1b:52:85:27:59:b6:25:7c:2e:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:BA:22:04:D9:23:02:15:4C:18:2C:B6:E1:CF:BA:11:5E:81:DF
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:23:3c:37:e1:a7:90:2e:20:42:8e:75:9e:1b:b1:85:6e:36:
07:d7:68:89:14:66:00:b7:53:01:0f:ec:3d:c8:53:6f:00:a4:
da:8b:5b:f0:f1:0b:b6:11:9e:0f:bc:f7:83:ed:72:93:37:b4:
dd:d3:e9:a1:cc:57:52:02:5c:76:01:c0:a6:51:16:92:97:d6:
ab:31:55:43:ff:f0:40:10:51:14:21:2e:2d:5d:e1:b9:17:1e:
b2:97:9c:20:88:21:0a:c0:3b:66:16:cc:1c:40:86:67:88:0b:
dd:e2:11:60:12:7e:62:b3:ca:e5:69:8e:be:95:d7:0f:4e:a4:
f3:9a:d1:70:52:38:2c:ef:2b:15:cf:11:ac:03:ad:fb:2d:76:
fe:ec:9c:e2:db:b3:b7:29:0f:95:25:eb:34:c7:16:3a:01:e6:
58:c2:d6:79:9a:3a:72:be:09:d3:4d:89:2d:f9:11:b5:0f:91:
1f:53:4c:b5:d2:d5:58:7d:d1:d2:12:b1:a8:d1:fd:da:19:00:
fb:e0:d3:c6:5f:03:14:1e:74:e0:6d:62:d5:e7:ee:d5:47:97:
55:96:ab:da:5f:0f:a0:c9:41:d1:31:d0:98:88:1b:f5:dd:0e:
9f:94:4f:3b:73:f4:6d:01:b5:de:93:da:9d:d5:dc:29:c1:a6:
05:25:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:11 2025 by rpki-client