Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier: fGCm+YZydb7srlyMSb5R8RqHw/+wXWPUN41Nz+w+aWY=
Subject key identifier: 77:B1:70:88:FE:2F:75:08:22:3A:DC:41:1D:51:DD:91:6B:DB:84:CC
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial: 0194BBCE957F2594C1686A63EF5CC359B9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number: 11E3
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=)
2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: dzShQIDFaPeIIgkAxtdMhmKXlrMHK1fCINRULbw0Dro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:7f:25:94:c1:68:6a:63:ef:5c:c3:59:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=77b17088fe2f7508223adc411d51dd916bdb84cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:6d:37:53:e1:9f:f0:da:a7:fc:73:61:3d:
59:2f:71:dd:e8:bf:41:81:53:31:40:51:02:3e:62:
14:3f:dc:9c:67:e1:2b:25:fb:43:86:26:81:7a:9a:
9a:70:43:63:ae:79:77:e2:9d:43:c6:8c:13:83:de:
21:3a:8b:3d:d3:d2:33:6a:0c:ec:eb:5c:28:ae:8a:
51:6e:34:f3:e0:eb:2c:0e:7e:de:a8:ea:5c:4c:ff:
d3:3f:2e:ac:71:37:ac:11:d4:c6:54:25:75:56:24:
03:78:4d:35:aa:2e:d8:80:f4:73:6c:fa:95:b8:92:
65:53:e8:40:a8:34:97:b9:49:d6:ea:e7:d9:90:74:
70:4a:46:07:b3:cd:d3:25:ea:f9:c3:11:f3:2f:f8:
9e:75:7e:9a:cf:d1:08:f7:66:eb:8a:83:c9:dc:56:
43:15:78:20:c7:e6:d4:d5:13:e9:21:b4:99:cb:c9:
8a:88:9f:28:ed:8d:00:00:95:c6:4c:0f:6f:bb:1a:
86:55:2b:84:c9:ff:6c:e3:3c:d4:0c:31:db:43:3e:
13:b5:67:bc:a1:72:0c:7f:0d:85:01:4c:1b:c4:74:
ff:f6:97:83:53:a7:52:76:90:69:97:83:63:e8:93:
c1:c7:4f:b2:69:52:78:df:7f:1b:52:d7:7c:23:90:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:70:88:FE:2F:75:08:22:3A:DC:41:1D:51:DD:91:6B:DB:84:CC
X509v3 Authority Key Identifier:
keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:0b:93:c9:35:bd:77:99:8c:d4:7a:c6:2f:60:3d:4a:1b:
e0:6b:fd:d1:ed:f1:13:6a:40:0b:a3:25:58:8e:f0:b2:a6:0e:
e4:f4:19:e9:ec:8b:1c:7c:3f:23:73:54:a2:28:c8:24:a5:2b:
21:c5:35:39:f0:62:6c:4a:78:24:94:08:16:5b:96:29:6f:86:
95:65:2d:35:e9:4f:06:ca:52:28:4f:24:57:54:cf:22:4f:1b:
a6:13:4a:d7:5a:c3:c9:b6:ef:83:78:24:60:70:59:a8:9a:ce:
40:fc:1c:26:13:26:e8:f6:3d:eb:02:96:ee:fb:53:07:df:fc:
34:11:0e:9b:c0:c8:bd:7e:e4:c0:2c:a7:53:be:8c:fc:b2:ea:
ef:bd:e4:b5:56:e7:82:7c:d5:25:10:b3:5b:6b:44:6e:9c:63:
ba:d1:d3:eb:23:25:6c:82:90:36:23:66:ff:0c:29:9b:d1:fd:
31:86:36:97:04:bf:91:81:ba:19:6a:9b:b6:93:38:62:83:77:
42:90:2a:34:a0:68:e4:5d:34:a4:2f:e2:19:74:c9:a0:06:58:
82:99:98:47:2b:d9:2d:90:3f:49:35:9d:b3:13:e0:ee:41:db:
44:9f:1e:27:cd:1b:2f:8d:57:eb:a6:0b:55:dc:a5:6a:4f:e4:
2d:fd:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:38 2025 by rpki-client