Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: oQh2KTeRY/j3+n0ZNwZ59DqxD1nTu3tEgLDo4lJo+jM=
Subject key identifier: 9C:98:70:D3:78:C4:5D:8F:F5:1E:2A:DD:F3:C8:9D:07:72:7F:9C:12
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 0194BBCE167E59150CD10CB87D3F6B0D96D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 0EEB
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: sW40h/Ueh/BGlImayeoIUHnXuubqacJ/GRZ9DHjlDGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:16:7e:59:15:0c:d1:0c:b8:7d:3f:6b:0d:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=9c9870d378c45d8ff51e2addf3c89d07727f9c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:70:ba:dc:c2:5c:56:d6:ed:fc:74:7f:4b:
bd:38:08:3a:05:21:28:42:4b:ef:b8:6b:96:56:aa:
6b:e1:de:ad:b9:35:bc:4d:d0:ec:1e:b0:28:f6:d8:
cb:f7:e6:b6:4b:c7:f8:5e:9c:ec:05:7f:6b:ac:e4:
c1:56:fb:0f:eb:64:c0:c7:40:81:b7:c3:a8:fe:a9:
e8:17:d8:5e:30:6e:50:93:84:1e:2b:75:18:4a:4d:
b1:60:ec:97:73:e8:14:35:af:18:ac:56:d6:b1:ac:
49:e5:74:14:fc:16:07:60:b4:98:9b:fb:4f:74:c7:
99:5e:47:04:f1:65:d8:56:28:e9:7e:11:a7:bd:e7:
0a:32:b1:cb:6d:bd:d7:1b:b9:c9:9f:03:68:56:de:
5a:a2:e9:cf:44:a4:10:af:16:f7:aa:be:4b:c9:e0:
07:66:bb:4a:48:98:49:35:ad:c5:c3:9c:bc:13:30:
95:de:bd:01:62:9e:17:f8:2a:0e:6e:bc:39:e0:96:
65:44:f3:e8:42:93:98:2a:00:17:3b:d0:f2:7c:6c:
2e:cb:c6:5f:7b:45:09:06:90:63:85:b4:83:57:ef:
44:85:f0:aa:e4:77:7d:3f:f0:22:42:87:f8:39:40:
16:86:f9:ae:f4:b6:ef:91:29:f9:f0:3f:b1:a7:d8:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:70:D3:78:C4:5D:8F:F5:1E:2A:DD:F3:C8:9D:07:72:7F:9C:12
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c9:a8:c4:c3:11:d1:d5:03:91:80:03:fa:78:78:90:4f:4b:
e1:86:02:10:0f:b0:10:e5:f7:09:7f:31:f8:0d:1e:8d:e9:94:
fd:2f:c4:a7:f1:f2:fe:03:2c:2f:a9:e1:05:9f:5a:08:a5:01:
1b:79:09:67:43:ed:c9:2b:2a:cd:9d:cb:61:cb:45:12:4f:a6:
45:df:f4:89:4d:9a:95:a9:76:52:93:c2:d1:25:68:2f:19:57:
f5:12:fe:b4:86:3a:3a:e7:08:07:39:be:03:0b:74:cb:74:8f:
ab:7e:b1:47:79:ea:14:fd:45:c7:d2:11:0e:d9:b1:2a:18:2e:
a9:7e:46:ee:af:f4:bf:ff:1b:34:1d:0d:5d:32:c5:18:4c:ce:
85:9d:8a:c7:ec:7e:0d:0b:17:59:45:d8:60:42:5b:2c:54:4b:
ca:5b:e8:fb:1c:4c:e4:aa:4b:a0:dd:b5:bb:e4:84:54:23:4e:
d4:31:00:56:6d:20:63:e3:c2:50:01:af:f4:10:37:fb:40:e6:
10:84:1e:7b:46:58:76:5f:35:e2:34:74:ce:6d:e6:5e:11:f6:
79:20:49:8c:11:de:c5:74:b3:cf:79:3c:d5:9c:60:d5:0a:79:
b7:c3:b3:f8:78:53:7f:a0:ad:1b:bd:62:c0:7a:1f:3d:9d:34:
c1:17:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:46 2025 by rpki-client