Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: bZpnoT9eHrmsfhLiiQfuf4HqOGCDbGUl1KLdXkya5fc=
Subject key identifier: F0:5A:7E:DB:5E:60:41:5B:C0:42:1A:62:49:C0:D7:E4:D3:98:B5:60
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 0194BBCEA6F5E97B654775468DBFA4D9060E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: g4kLgNHeM176/UPGaXA5y/1DwXglzWRXdhs+5pacVR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a6:f5:e9:7b:65:47:75:46:8d:bf:a4:d9:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=f05a7edb5e60415bc0421a6249c0d7e4d398b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:f9:37:cd:3b:ac:d4:76:72:4a:4d:08:c6:
de:0f:1c:89:fa:14:8b:e6:a8:94:2c:2e:76:e3:f3:
74:41:46:f9:d2:6a:53:90:db:6c:b5:0c:4b:3e:26:
ad:09:f0:31:90:08:95:b7:25:8a:40:25:75:61:b3:
06:5b:99:d0:53:c8:14:23:36:45:0f:3a:9b:a1:d0:
41:d8:4f:2b:4a:7f:e0:f5:61:0f:89:58:f0:fe:f0:
6f:ff:66:4c:bd:b0:de:b1:c2:d7:52:4e:18:84:e5:
44:42:c6:ff:19:de:3d:ba:17:07:f5:4d:bb:83:01:
7f:6a:0d:77:9c:b9:77:63:f1:92:88:11:a1:b0:e1:
80:18:5b:85:90:8f:0d:f6:04:02:51:fa:97:76:ee:
da:71:0f:cb:d7:25:79:10:70:b8:b9:9f:a3:db:1c:
c1:61:ad:db:57:20:8e:31:8b:e5:3d:84:50:e1:d0:
85:fd:fb:cc:13:d3:fa:00:b8:72:53:4c:60:1e:62:
b7:c5:3a:26:e2:ae:10:08:36:3e:54:3b:5b:f7:8f:
62:75:9b:27:b5:03:37:0b:85:8e:a1:07:48:04:6c:
48:d1:77:3f:70:3b:3c:f7:74:3b:fe:5d:3b:a5:34:
0b:5b:a6:48:6e:ad:7f:11:a9:1f:92:70:fc:f8:1f:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5A:7E:DB:5E:60:41:5B:C0:42:1A:62:49:C0:D7:E4:D3:98:B5:60
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5d:56:17:41:67:83:ce:66:da:49:b4:c4:8d:6c:00:cd:61:
bd:16:91:0d:a5:77:69:bc:3b:29:ae:02:a0:61:90:c3:d5:b3:
b7:73:22:70:38:6e:df:af:f7:9f:cb:ed:f7:26:6b:3f:44:0f:
63:66:df:81:7c:58:ff:ae:e5:27:40:c4:ac:88:06:90:94:99:
af:03:1e:11:08:ac:61:09:f3:d5:8a:a2:ec:51:62:bb:08:a7:
f7:4f:ad:d6:4f:47:40:3f:e0:1d:36:5f:bf:7e:0f:54:0b:c6:
a6:cd:ef:30:9f:df:b9:17:6d:8d:ec:75:74:0d:69:d7:1e:a2:
af:ca:24:06:ff:b8:fa:c0:de:7d:ed:c6:c0:ac:73:5c:bb:70:
f0:76:30:47:72:2f:0d:58:5c:ab:bf:e4:35:ad:32:86:0f:c3:
35:da:4f:72:08:08:5d:e3:8c:9a:21:76:5b:ef:ab:08:b1:d7:
f2:b0:93:f7:2c:64:0a:fc:14:7e:80:51:c0:97:ee:33:fa:9a:
3d:14:19:3d:c0:65:b6:0d:3f:63:09:2c:7a:06:7e:f8:46:4e:
13:39:e1:ed:3e:14:1f:89:2b:4e:c3:93:a4:db:e0:ee:1f:c9:
b8:db:f2:9b:b0:46:63:d5:fb:e1:91:79:53:fd:3c:aa:42:c0:
5f:f1:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:03 2025 by rpki-client