
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
File: adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json)
Hash identifier: 0rxrUamNsyyOJFMfZ/ECmaQYI3r/4IlgcBaK0V8NT+E=
Subject key identifier: 6C:73:25:3C:54:3D:79:08:6B:6C:43:A9:D5:54:C2:88:88:12:F9:CF
Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Certificate serial: 0194BD85B602A8017452895222E58B2DDCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
Manifest number: 011C
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: zVXN/n8qXpT/nGnA+Kky/HE0+IDkcn6cDkAUeJuv/gI=)
2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:02:a8:01:74:52:89:52:22:e5:8b:2d:dc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=6c73253c543d79086b6c43a9d554c2888812f9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:98:46:a7:30:23:94:5a:ed:56:9d:51:db:
cd:5b:ed:54:96:b9:37:b1:77:c3:21:a3:bb:3a:41:
5d:fb:8d:81:d0:5f:c1:51:e3:8c:3f:ab:63:2c:df:
44:bc:94:d9:6a:9d:aa:fe:58:1c:5e:a6:f6:66:2b:
e0:d0:df:24:c5:48:be:86:82:34:b2:3e:6c:2d:71:
08:65:f6:c7:b4:e5:00:87:73:d1:4b:e4:23:05:f1:
97:b8:b2:45:d7:f5:e8:4e:22:59:66:66:66:23:b1:
9e:2a:b4:6e:0f:0f:b2:c1:bd:04:c6:1a:e6:77:51:
af:5a:20:e8:22:82:34:45:fb:94:ab:8f:fa:58:c6:
15:73:0b:94:63:c4:46:29:96:e2:8e:55:49:b7:49:
b3:3d:51:82:45:2c:46:c3:2d:14:68:2d:16:40:49:
3b:f3:bb:0a:af:36:99:79:6c:20:a7:b3:ec:ac:d7:
86:3e:86:50:35:be:ca:ff:91:99:ef:23:04:ea:fd:
a4:a2:f1:6c:c5:15:64:7e:67:d3:96:c2:27:f6:a7:
bc:84:3c:e7:99:54:b0:9a:b6:d7:4d:0a:8a:14:6d:
d8:7d:47:67:32:e9:f3:ff:54:d0:90:d3:da:7e:3f:
40:8e:db:a5:9d:d5:1b:24:1f:0b:09:f2:60:6e:ca:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:25:3C:54:3D:79:08:6B:6C:43:A9:D5:54:C2:88:88:12:F9:CF
X509v3 Authority Key Identifier:
keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:9a:47:8d:a4:1b:eb:01:47:fb:5e:48:e5:11:e8:26:06:
c8:39:ff:5d:05:0b:91:cf:d1:8a:df:d7:a2:f3:c9:4e:dc:b8:
dc:b5:b1:66:de:bf:51:0d:6f:03:13:f7:86:ca:23:68:dd:89:
30:c9:7f:5a:84:7b:96:c7:af:e6:71:ee:29:19:0f:42:12:3c:
f5:cc:c3:3b:b5:95:81:37:de:1c:f4:3a:b3:20:1c:05:a5:8a:
67:e9:93:15:85:8a:b0:7e:33:02:36:92:71:88:3b:cf:75:e0:
c4:92:14:8f:b1:3a:c2:bb:87:be:88:39:da:6a:8c:62:01:1f:
04:89:da:1f:9a:99:36:f9:62:84:79:f2:ac:2c:93:f7:41:a7:
81:48:9d:23:8d:98:c1:91:95:9c:8d:37:1e:eb:ea:04:d2:ea:
cf:a7:73:17:78:67:3b:23:f4:b5:6d:44:b7:0f:e0:2c:8e:98:
cf:af:90:0c:3e:85:fb:07:60:af:17:0c:8e:5f:ba:ec:43:67:
ea:08:48:6a:6f:3a:e6:43:90:f6:f8:be:ab:c0:67:ba:91:c0:
07:08:ff:4d:20:bf:52:c2:2f:91:1a:cf:6f:57:c5:fa:7b:66:
d0:c9:18:24:68:8b:19:db:6d:2c:85:36:62:22:5c:8d:a8:1b:
44:98:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:57 2025 by rpki-client