Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: s2igm67KSOHAB3UnISKmMwdKPyqKxBdAFT2h4Iu6yLw=
Subject key identifier: F1:5B:29:6D:76:16:B9:6D:D4:0C:FD:41:3D:D2:52:49:6F:B9:EC:76
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 0194BD4EC5DDBAB86483C91FD8A1CF0DC613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: CK9Thxj6eATTJNkVgLJd5E9GpCLjEJy5fJChsRhcOlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c5:dd:ba:b8:64:83:c9:1f:d8:a1:cf:0d:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=f15b296d7616b96dd40cfd413dd252496fb9ec76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:f0:2a:bb:a8:5c:b4:52:88:58:31:49:d0:
24:5e:00:88:e7:51:b2:97:9d:93:5a:e8:2e:43:1c:
92:c3:92:76:4b:27:11:58:d2:fb:ec:4f:0b:8e:bd:
29:a9:fa:11:47:2a:a6:63:79:89:06:e7:1d:a2:b4:
9f:47:0d:e2:71:0c:f9:aa:a8:f2:9b:58:c2:b8:52:
c2:4f:5d:0b:86:0b:32:ee:86:95:1d:ee:54:23:34:
4f:74:52:b8:a6:de:47:8d:dd:0e:c1:20:32:da:96:
41:08:da:67:f9:05:d5:0e:6c:92:11:d8:54:ae:fa:
3c:8f:42:bc:26:f9:d6:4f:49:7d:c3:d7:a8:13:d3:
f1:72:62:f0:09:5d:61:9b:02:2f:d2:df:52:af:50:
95:87:cc:52:57:82:e8:51:99:b2:7a:a2:56:53:2b:
56:1a:1b:98:55:64:4a:40:ab:b5:c6:a7:29:66:3e:
47:ca:9e:16:0e:40:c2:9e:74:6a:a1:c7:20:d4:34:
1b:02:a4:10:c8:eb:db:6b:34:88:d9:d3:c5:a5:91:
c3:3b:bf:cc:0a:24:75:ff:2a:4b:aa:e4:dd:3f:73:
69:52:10:92:c8:8c:1a:30:2b:97:5a:1b:9a:e4:17:
3a:16:a9:f6:bb:ba:a9:76:8c:b4:41:e2:e6:65:2a:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5B:29:6D:76:16:B9:6D:D4:0C:FD:41:3D:D2:52:49:6F:B9:EC:76
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5d:49:81:ad:c8:c2:36:64:6b:5e:1d:3f:39:ea:e0:da:48:
e9:75:2b:c4:16:55:5e:f9:84:82:82:f1:43:9d:b4:6f:22:f1:
17:5e:4e:d0:0d:73:28:d6:10:ff:0e:8f:37:8b:c8:ad:97:53:
55:82:3f:ed:04:cf:af:36:ba:24:73:d5:ed:e4:5e:1d:0e:95:
35:d7:21:55:be:0e:a1:c7:05:b3:ea:80:13:21:b0:b9:5f:dc:
7d:33:3c:41:56:ed:7e:72:ab:1d:ae:35:ef:3d:f2:24:8a:0e:
91:ef:bd:cb:f4:c4:b1:7a:a1:14:a5:55:82:9a:92:7e:0a:27:
c6:0f:0f:9c:ee:cc:00:0f:9f:48:09:fb:aa:a1:b9:f0:4b:6f:
0e:c0:bb:23:42:82:36:f8:88:ef:72:a9:03:69:47:e3:a4:f9:
4a:ba:da:07:1b:96:27:c9:90:50:48:fa:99:d0:9d:87:38:09:
5c:c4:b6:00:f3:28:82:e3:17:1b:2c:75:6b:17:55:7e:b4:ce:
3e:48:ae:f7:cb:73:0b:69:14:38:86:18:6f:09:c4:56:12:2f:
22:db:71:62:e5:fe:df:63:da:47:da:31:29:c0:d6:38:9d:55:
dd:80:ad:5b:a6:e0:54:9b:7f:ad:85:55:05:74:63:25:de:ea:
a5:da:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:25 2025 by rpki-client