Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
File: h64K8oLdTpvBuCGUrtOxlpPYcpg.mft (raw, json)
Hash identifier: VkMli6xTpnncYv75iWrXyNvfJox7+EbyAKyQdf+jIDM=
Subject key identifier: F6:66:B2:C5:D3:E4:8E:10:BB:9B:C3:88:19:AE:C5:CB:1A:7D:E7:84
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 0194BCA9F7AF3F3AC7C61E4813B3DEE1090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
Manifest number: 13C2
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: h64K8oLdTpvBuCGUrtOxlpPYcpg.crl (hash: buMKDHd9b7Q2XeYpX0TeOwHEWE2APPxBH6nV0uJsXBU=)
2: lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa (hash: mLbnmSbQ6vGnKj69SLVqu+Yh8gagKvZ4GHe9rwR2Lj0=)
3: lbtG49eN0a1POYPwkNLEN0HddFE.roa (hash: KWEYHURJFnJiN3hEz4GFQQGAyl2j2r/yzzHo/uu7its=)
4: mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa (hash: XJ8W6auBJZmG59tDkBVeAttPeBBOTBWVE2NfyT5YHGc=)
5: wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa (hash: Fan3WbewEC2StpbKQkBe0buOZw2QS1aWcf4mNkJr634=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:af:3f:3a:c7:c6:1e:48:13:b3:de:e1:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=f666b2c5d3e48e10bb9bc38819aec5cb1a7de784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:ed:0b:c3:1b:25:38:ed:20:5a:94:84:52:
7d:a0:63:32:ff:15:29:cb:5d:be:4e:33:05:2d:9a:
0d:cd:a7:d8:9e:3e:2e:75:85:b0:86:4d:a0:3f:d5:
fa:a6:ec:1a:7f:5a:ad:08:7f:f0:a3:1c:af:8c:28:
e8:41:53:a7:9a:d7:27:11:1c:1a:73:43:4a:3f:5c:
65:17:51:fa:d9:8c:98:97:96:c5:a3:84:43:e4:69:
2b:60:08:b5:bc:e4:6c:f4:a0:3e:1e:36:38:8b:ac:
0a:82:20:7d:5e:f8:6b:f2:6a:dd:c7:ea:e9:54:4d:
97:23:29:5f:fb:c9:da:0c:b6:12:35:cd:84:ff:f0:
8b:eb:8b:44:a0:ab:33:a7:8e:1b:91:40:00:de:fa:
91:5d:f5:3e:e1:d2:46:ac:b6:28:88:c6:48:ba:49:
70:c3:06:0c:34:bf:73:83:b5:81:f1:58:81:fb:89:
97:ea:d9:79:ac:bc:3f:b5:23:1b:dc:b6:b9:c6:56:
80:09:1a:47:c3:0a:88:02:b3:f3:7a:19:49:8e:d0:
c7:ab:a9:4a:3d:d5:78:f8:ee:01:50:6f:2b:84:ff:
e6:45:bf:8c:8b:b2:cf:67:5c:f4:24:5f:80:78:01:
a6:91:19:cd:6e:e3:20:06:2d:b6:f8:5e:d3:b6:7c:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:B2:C5:D3:E4:8E:10:BB:9B:C3:88:19:AE:C5:CB:1A:7D:E7:84
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:48:08:70:13:37:70:52:7e:b4:90:ca:7a:75:be:02:4d:
32:b8:b1:f9:c8:ff:11:c9:9d:04:4a:91:e3:be:70:12:61:58:
b1:33:8a:4a:33:c3:aa:b8:1e:da:29:45:a7:59:68:87:68:36:
e8:fe:ff:8d:0c:c3:cc:18:3c:a4:f1:49:86:ec:f4:33:bf:16:
15:63:08:70:53:12:64:dd:0a:91:ec:d6:cc:5e:3c:c1:3e:39:
b3:57:7f:ab:af:9f:56:06:3e:b8:be:bb:24:55:95:72:4c:d5:
d4:82:a5:35:c5:6e:9c:58:4d:2d:ad:b1:a5:64:ca:b3:b6:4b:
8e:cd:22:0e:6d:32:b9:21:72:5f:e9:71:be:17:7e:e8:fc:d2:
9c:46:52:42:77:19:c0:79:00:30:67:ed:1d:02:16:6b:b4:c3:
1e:ec:33:15:45:6c:05:da:16:da:71:21:b0:6e:29:91:60:01:
38:cc:69:7d:e0:9a:d7:0d:a6:5f:78:98:63:a9:6e:0c:14:62:
fb:14:c2:b9:94:17:fb:93:80:c6:79:ee:a3:33:d1:c9:6e:e4:
03:43:8a:b9:80:c0:34:61:70:e7:bc:14:7d:d9:55:72:67:c4:
a2:88:b1:ea:75:6b:0d:01:33:49:9a:f9:91:03:be:de:b7:78:
4a:14:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:25 2025 by rpki-client