Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: ky49jgQCEuWrIro+AYB/kpI8/oa0ma/PNwPzWYHr4/w=
Subject key identifier: 46:01:9F:1A:CB:B8:A5:FA:21:08:EA:2E:A2:C5:F6:B9:30:E3:DD:17
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 0194BCE0E8DF0F957A70C749BBC33BD657F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 03C6
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: 3JlcQxD2NXWLaEj6J42YSdi1quE.roa (hash: ZFdShZLQiri1BeTMte27QBSxcmd4A78sb6jnkkO6l9s=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: SeOCcc530TVSlY9Jf+Q/OlK1W0QEqWO4bMXaXssO+OY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:df:0f:95:7a:70:c7:49:bb:c3:3b:d6:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=46019f1acbb8a5fa2108ea2ea2c5f6b930e3dd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:f4:8b:3d:1f:e9:3a:ec:22:a9:11:9f:63:
cd:b7:b4:9d:f9:6c:42:e9:b1:c5:d9:1a:f6:6b:98:
0c:c0:85:15:82:cf:da:89:7f:90:cf:1d:a5:51:9d:
b7:94:34:78:55:cf:88:3d:c9:a8:65:5b:1d:c5:a2:
c2:02:2b:33:30:1b:55:fa:ac:44:b8:4e:67:a3:e1:
f2:6b:3a:f4:c2:52:5f:d2:da:fc:ba:8e:18:d9:5d:
9b:c1:2f:78:44:c1:49:6c:38:b4:f5:74:52:54:43:
12:bc:96:91:85:61:36:ee:56:55:7f:79:96:2d:19:
87:c4:36:96:69:5b:06:5d:de:5b:56:27:cf:6f:a1:
ac:9d:93:0f:e3:81:7f:3c:b6:9a:1e:4a:91:67:8f:
2c:d4:26:29:ed:0b:1e:40:83:8d:d7:4e:a8:3f:22:
d0:18:2c:b9:fa:38:0c:ad:7c:be:fb:81:b8:43:b7:
6f:83:17:45:13:30:35:66:1e:c9:74:a6:a9:ba:8a:
a1:8a:75:56:92:ae:97:ae:de:3f:18:4a:af:e9:bd:
cb:a5:3c:fb:49:ec:0d:1a:b8:96:27:7c:c4:f7:c5:
09:ec:85:ee:15:d7:09:4f:2e:2d:7f:49:55:1b:07:
1a:ff:a3:ce:6c:45:5a:1c:91:0e:f8:e7:b9:41:07:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:9F:1A:CB:B8:A5:FA:21:08:EA:2E:A2:C5:F6:B9:30:E3:DD:17
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:45:2c:cf:78:b2:b8:b7:95:4c:d4:92:cd:89:96:47:35:
a8:55:59:ea:1e:a1:94:33:82:f0:f0:0d:54:c9:68:73:10:94:
a9:b2:dc:d9:4e:66:03:c0:72:89:68:fd:1c:88:20:a3:31:49:
14:2a:bd:73:55:e4:0a:28:d6:14:37:9c:c2:64:f2:ab:c5:e3:
ca:63:5f:56:fb:6e:49:59:97:7e:18:30:41:91:e4:01:e3:dc:
1e:6f:55:cb:a9:e3:90:fd:81:68:e7:83:e6:bd:ae:ae:61:9a:
9f:89:41:39:ea:c9:f9:36:df:87:b1:d8:97:8f:82:3c:a3:22:
b4:e2:23:0e:22:e3:9c:8a:7e:cd:08:7d:41:f1:f9:03:39:1f:
fc:72:85:f3:ef:8b:70:7e:90:7f:e4:fe:6c:99:9d:80:db:de:
25:ae:46:b9:10:01:19:41:67:41:97:ab:ce:ea:f3:e1:49:16:
32:50:e9:de:c2:27:1d:95:d0:78:19:37:2b:fa:1a:05:a9:04:
cb:a4:29:37:5a:be:69:8c:34:d5:0a:f0:47:af:ec:84:83:ac:
b0:db:09:af:88:cf:f4:bd:67:49:51:01:f8:37:89:4c:b5:35:
bc:a6:2f:4e:7c:4c:57:37:a1:40:04:dc:fd:96:9a:b9:ea:5a:
4b:a2:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client