Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: MKfca63wzW+sUwPnMe3d0PwxKueiMOpfmGb6d+UfhrU=
Subject key identifier: 99:08:BC:EF:A6:CB:5A:82:B1:B9:5F:F5:81:11:EA:EA:67:6B:69:8D
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 0194BCAA021141A9F507EE53263576515E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: nYrscrNrW0dg4qyQmnvzj8i7kmgUo7GQrr6yB0PJ84g=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:11:41:a9:f5:07:ee:53:26:35:76:51:5e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=9908bcefa6cb5a82b1b95ff58111eaea676b698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:09:57:ce:29:5c:31:98:9e:7f:6e:c7:62:
06:66:52:bc:eb:ca:47:f3:77:a1:3b:e7:cc:97:56:
d0:7b:0c:a9:3f:5a:9a:0d:9a:a4:4f:35:34:99:68:
c3:a7:d2:fe:9c:66:e1:54:11:f7:f7:9c:0e:b9:f7:
eb:39:b4:eb:e9:14:89:18:30:00:b2:b7:66:05:6e:
fc:58:e9:00:df:56:15:57:1c:0f:12:57:f2:89:e5:
bf:7f:d6:e4:63:5e:cd:43:ad:1d:34:e6:55:66:c4:
2e:12:9c:67:eb:ca:73:28:b7:81:0c:5f:b9:c2:0e:
05:13:43:05:20:ae:dc:32:85:69:a1:cd:07:75:e4:
11:d8:a6:9a:0d:63:ae:fe:f8:e5:3a:a5:8a:11:5d:
14:fe:93:b6:e3:a8:27:86:4f:4f:ba:d8:45:7a:6b:
66:94:14:ba:3c:85:ea:a4:11:ec:7c:2c:51:c9:e4:
2e:6a:10:fa:49:b6:02:55:10:bb:a8:73:83:ce:b2:
4e:58:4d:be:54:7a:2b:70:ec:cd:32:0e:ce:3b:bc:
bf:df:be:83:52:11:b9:15:0a:39:91:0f:71:a9:b3:
6a:dc:1f:b7:5a:b2:91:61:cc:be:0e:76:d1:d6:51:
18:d9:1b:95:af:3e:ac:86:45:35:d0:5f:2f:45:c7:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:BC:EF:A6:CB:5A:82:B1:B9:5F:F5:81:11:EA:EA:67:6B:69:8D
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7b:9b:4e:93:97:b1:ef:ea:ee:e3:4c:f3:df:0a:17:bd:29:
22:ed:c0:a0:64:44:b9:27:18:41:35:43:40:29:e5:88:69:9b:
85:b4:9e:88:69:fa:7a:ac:22:38:0b:f9:9e:10:b5:1d:3d:39:
55:d5:56:49:cf:9c:34:16:2f:58:25:6e:00:18:c8:e9:89:10:
b0:c5:9b:80:c1:f1:39:5a:9c:8b:37:22:a5:00:84:d2:ab:6f:
7f:74:e8:23:5d:16:f0:65:ca:28:dd:ca:e5:54:8c:b8:72:2d:
d9:44:1d:20:69:99:7f:d7:67:3b:d0:44:56:61:dc:97:3c:8c:
b5:69:92:9e:8e:ed:7d:18:74:a2:ce:d3:ef:54:55:50:8d:9a:
f7:a5:65:22:30:3c:85:63:6e:64:3b:e3:3b:3e:b0:ef:a4:3d:
97:58:bb:1a:b1:08:04:8e:06:84:44:5d:df:53:d5:67:45:fd:
55:8c:3d:91:f7:2c:0b:92:58:f1:d6:f7:36:71:3b:da:62:00:
84:ce:2b:84:12:a9:7b:79:ae:1a:dc:32:96:88:69:33:e2:50:
d4:ac:f9:10:26:95:b5:fe:dd:71:92:26:81:4a:39:a2:8c:63:
44:36:14:f6:b3:bd:43:08:0e:9f:5f:d4:c6:3c:56:f6:c6:3a:
7b:87:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:41 2025 by rpki-client