Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File: 65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier: r9Z1c3SBI59f1EYbEVzfwdL1IBU6//GWtsi22WDEH5E=
Subject key identifier: 3D:FB:6C:01:D6:50:E7:AD:29:22:27:47:2A:E9:6D:0C:B4:57:EC:83
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial: 0194BCA9E80EA5342B34F6CD04473BB61B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number: 02B6
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: 7zcjvleMANlSPNL2mcH3nowf8mQ0bvlXqON4ZRMidSA=)
2: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (hash: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e8:0e:a5:34:2b:34:f6:cd:04:47:3b:b6:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=3dfb6c01d650e7ad292227472ae96d0cb457ec83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:ea:66:d1:8e:15:43:0b:25:3f:59:8b:8e:
d2:ba:ba:75:57:89:b8:87:39:e3:7a:e8:da:7c:67:
73:9f:68:00:27:56:d2:b3:73:7d:1f:8b:93:f9:8b:
7d:ae:2e:04:b1:12:d1:cd:4c:2f:e7:5d:24:8e:45:
52:26:f3:0b:13:1f:14:c3:45:5e:88:c3:b2:dd:89:
0c:c6:5a:3e:fc:46:a6:62:c5:c5:7b:91:a9:1c:a6:
c7:b7:f7:84:11:3f:3f:98:14:4f:b9:38:44:91:ef:
ff:06:b3:ff:46:f8:ef:cc:30:33:32:4f:ee:46:2c:
22:92:92:de:cd:ba:d8:9e:2b:a3:dd:e3:d0:a8:cb:
7f:9e:66:6b:b3:00:32:58:11:2c:41:e6:4a:0b:4e:
f1:76:b3:7e:39:fb:be:e7:7f:31:e6:5e:04:d3:79:
f2:ca:41:89:c4:12:53:55:8c:85:89:2b:a4:bb:be:
b1:83:28:cb:6b:86:a7:a0:fb:03:88:5a:89:56:f5:
a5:ad:d6:9b:95:1f:63:2f:d8:f0:e8:d7:6f:b2:17:
c0:70:bc:3a:37:18:57:45:08:11:a4:91:f8:5f:67:
17:7c:95:02:5f:2a:ba:c1:42:5f:f3:78:5e:bd:25:
b8:93:8d:82:2d:fb:46:49:4f:ad:d4:ed:4a:09:c2:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FB:6C:01:D6:50:E7:AD:29:22:27:47:2A:E9:6D:0C:B4:57:EC:83
X509v3 Authority Key Identifier:
keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:2e:23:e4:18:56:8d:61:91:34:65:2c:3e:ff:e2:18:d9:
10:33:e8:75:95:8b:ce:f2:6c:2a:fc:24:0b:fc:74:da:ca:bc:
eb:3a:b5:1a:4f:86:4f:fa:55:d4:38:8c:06:b8:ff:fb:2e:0b:
ee:6a:bd:af:bb:ef:10:c0:e2:7a:7d:a9:76:a8:c0:5c:60:aa:
4b:44:04:e1:11:cf:8b:dc:e0:df:12:96:90:43:c6:97:df:9a:
e8:20:b5:cd:ee:81:b4:ad:12:c7:81:98:05:b9:a6:8a:82:ae:
36:17:b3:a5:fd:92:5c:e3:2d:86:37:e4:ec:3b:6e:66:94:93:
b4:b2:8a:3e:08:0d:73:b2:6a:df:ff:c7:27:db:38:e8:f2:06:
f1:64:50:95:71:66:65:70:48:3e:80:c5:3f:4f:c8:8e:81:83:
30:4d:8d:4e:ff:78:37:59:c1:90:4e:21:c3:ee:8d:d3:18:87:
c8:8f:fc:71:9b:14:8f:48:ed:6d:73:e6:ea:39:37:ab:3b:44:
ed:88:d8:ef:f3:cd:54:17:29:90:82:83:78:de:69:e5:22:cd:
6a:36:b9:e7:f7:78:38:05:92:5d:d1:02:b9:cf:80:a0:04:22:
a8:5c:fa:e1:26:79:fc:3b:94:79:4a:8b:e8:aa:bb:3d:90:ab:
7d:d4:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:18 2025 by rpki-client