Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: nEeQyLgA8f3LLSHEXDQHt7KZr9mDuvqNqmfV9QrInjg=
Subject key identifier: FF:6C:DF:8E:5C:84:ED:3C:23:A6:4E:E4:43:0E:28:6B:77:2D:AC:FB
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 0194BD4E99C55FAA6909D369966150FD5A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=)
2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: 4kxt/7zYyzkNIeexhUEShfAvpp6JeWL4jfJP2Lm0w7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:c5:5f:aa:69:09:d3:69:96:61:50:fd:5a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=ff6cdf8e5c84ed3c23a64ee4430e286b772dacfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:dc:43:02:fb:2b:46:34:6a:2f:95:59:f2:
3b:5d:53:0c:df:3e:14:0b:d9:c6:f9:76:4e:62:03:
7c:aa:bf:d3:84:70:00:97:dd:71:ea:f5:94:5b:65:
25:3f:59:2e:27:e5:77:c8:b1:b3:28:6c:e5:14:23:
de:d4:7e:ab:dc:e9:86:b2:71:6d:1e:54:9e:e3:f3:
97:5c:29:76:34:26:58:e5:91:65:fa:3f:91:5b:a2:
92:49:f2:4d:68:12:32:34:18:1e:91:b2:d9:8c:2d:
b9:99:d0:14:cb:9d:35:a4:d7:a7:90:1e:06:c1:a4:
a2:02:07:1a:4d:16:6b:f8:a5:fe:3d:01:6c:14:e7:
a8:dc:5c:86:23:f3:15:61:c8:ee:b1:33:c8:d9:48:
62:26:60:41:be:8b:20:8f:41:7c:c0:91:ca:92:1e:
35:0e:6e:cf:20:e4:1c:49:87:a3:a6:43:aa:cf:b0:
35:1e:bd:7c:71:f4:8c:3a:3a:65:8b:50:86:25:d3:
2c:1a:d9:ea:e2:93:cb:99:c9:fe:32:8f:56:9a:07:
34:9c:72:6f:b2:53:dc:02:70:67:0b:b8:43:41:2b:
9e:8a:4d:31:56:97:e0:01:52:d3:bf:1c:a5:93:8f:
fc:24:64:34:74:39:b9:d0:03:e4:8a:f5:56:2d:d9:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:DF:8E:5C:84:ED:3C:23:A6:4E:E4:43:0E:28:6B:77:2D:AC:FB
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c5:69:ec:ab:7e:a0:5b:4b:86:ba:fb:7f:c6:43:c7:05:2d:
2a:f0:1b:61:dd:44:b0:5b:66:c4:e4:04:3d:fc:4a:04:b2:2f:
de:51:1a:80:f2:ee:9c:71:aa:67:59:31:b3:6c:a4:02:b0:6c:
9c:b9:de:c0:8f:21:be:9b:49:5d:fa:d3:b7:2e:1b:2b:e6:74:
a7:48:2f:4a:3e:1f:8e:3a:0b:b8:64:69:0c:cd:e6:6a:2a:21:
bc:68:bb:89:00:b6:26:35:58:e0:17:d8:c4:93:4e:0a:9f:a9:
d5:38:6b:57:f2:40:f1:92:68:04:41:56:32:04:46:4a:a4:60:
39:45:f4:33:09:43:eb:54:ad:fc:08:45:14:91:55:33:a8:5d:
44:b5:71:c0:3d:2d:1d:8f:73:2f:74:39:56:4d:a2:14:0d:a8:
ea:e9:e5:44:6a:24:13:e6:57:db:56:b5:a6:6d:19:20:4c:74:
b7:bb:34:83:67:c6:fd:04:f3:5b:dd:af:76:a1:c7:04:29:6b:
69:6b:4e:78:43:14:9b:07:fc:a5:ec:21:cb:14:4b:d1:67:dd:
8e:52:b7:09:29:1a:eb:c2:91:08:16:ae:80:32:2b:b5:6f:79:
f6:31:50:d0:ea:e9:8b:56:90:fb:57:a0:6d:39:55:a4:3b:70:
89:d8:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:10 2025 by rpki-client