Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: wRNDZjtWudqSqdpAJ3m9kCcuP+gQ2kQqWPdg0c5/+j4=
Subject key identifier: 04:B6:57:3A:71:4C:E1:76:71:B3:38:7D:8C:AD:25:67:10:4E:1F:00
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 0194BCA9845E17E25F137332F8B87B329619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: hU2FvMmrArMNZhxHpXrQqZEvGRCRZLuFc26miAsKrCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:84:5e:17:e2:5f:13:73:32:f8:b8:7b:32:96:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=04b6573a714ce17671b3387d8cad2567104e1f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:f6:37:1d:ac:c6:f3:5d:cb:00:5a:cf:05:
3a:59:93:d7:a6:f7:b7:e8:83:e9:a4:20:cc:19:8c:
8e:cc:0d:a7:5b:8e:f6:fb:e8:50:3d:6d:bc:91:e6:
6e:bf:fe:96:c0:07:1b:39:79:b4:38:ee:8d:1a:dd:
3e:6b:e7:24:02:af:f5:84:05:43:0a:91:f3:c9:d7:
ff:ed:14:de:94:77:6e:54:65:ef:9b:b8:4a:20:4b:
55:33:94:d8:b3:c4:c7:78:40:1a:e2:95:9b:17:9c:
3c:e8:9c:0f:c6:3b:fc:4b:da:3d:91:7f:4c:bc:0a:
f0:5b:f3:2a:83:b3:39:d4:21:63:e9:a3:e2:9a:e9:
5b:ca:4c:82:4f:af:1d:3f:b1:99:cf:b2:25:e7:fc:
b4:67:ff:bb:99:bc:84:97:7f:ad:79:3c:b6:64:da:
69:d7:27:3d:c7:ea:12:5c:a8:ee:ea:9d:a9:55:fa:
7b:8b:ff:43:5f:e6:ee:78:ea:0a:e2:89:a4:69:58:
aa:08:8d:57:57:6c:21:21:83:36:5e:69:b6:2e:15:
c9:a4:7d:88:73:3d:79:0d:67:88:5b:47:d8:e8:1d:
4a:21:50:fb:6d:b1:dd:de:b9:bb:61:d7:11:60:b4:
6d:b5:3f:98:eb:de:c3:d8:f1:2b:e6:36:bf:84:0e:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B6:57:3A:71:4C:E1:76:71:B3:38:7D:8C:AD:25:67:10:4E:1F:00
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2c:0b:b4:92:93:e5:fd:76:5c:e7:d0:81:4b:3d:fb:54:a1:
01:db:f7:47:85:e0:8f:1a:ea:df:99:30:bf:f7:bd:2b:bc:e9:
c6:39:9b:1a:01:e6:13:dc:8c:60:46:ca:b1:0d:55:e2:0a:6b:
92:04:56:49:f2:9a:2d:72:ac:a4:64:a2:15:e4:7b:d0:23:cb:
20:84:7f:ac:f6:fe:19:06:e3:16:6b:c4:7a:21:48:ba:a1:58:
7e:13:b4:ad:52:64:5f:a1:5a:12:5a:4a:9e:5c:b9:cf:82:ba:
1c:07:c1:88:3e:81:6d:02:22:f8:79:07:1a:68:79:e9:5e:f2:
99:4c:3e:da:bd:73:20:a1:b5:ff:31:4f:19:ae:b0:74:50:25:
6a:e9:76:f8:a1:84:ed:de:69:35:70:06:cd:1e:e8:0d:bd:09:
f9:96:f4:d1:cf:99:54:8c:2c:16:03:73:8a:ab:8d:9b:03:9d:
b8:ce:2f:0a:31:68:24:75:ad:b6:89:6f:87:8d:2e:1b:fd:36:
69:88:82:dc:d4:3f:35:4a:91:e0:10:94:fd:90:6a:b4:39:4a:
04:be:20:01:e7:d8:f9:d0:b8:42:c3:20:a0:97:d3:c0:d6:95:
8a:dd:42:03:c3:82:ec:63:28:e9:e1:24:10:48:93:ac:af:38:
52:80:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:29 2025 by rpki-client