Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: A7ekl0m9i1uzdVTVdHs7gRkn+0pVT/YCp9Hdg8BZz8Y=
Subject key identifier: 13:DE:E6:82:28:99:0D:64:30:B6:54:2C:0A:4D:F2:9E:E3:23:38:7F
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0194BC04F527EB2B881F5AAEBA9F07274115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: ViuauY9lv8Vgy8vVOXa3yFFHkoLRnrb02AGB+peNEgo=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:27:eb:2b:88:1f:5a:ae:ba:9f:07:27:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=13dee68228990d6430b6542c0a4df29ee323387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:61:0e:d6:b3:15:39:6f:84:0b:10:d8:0a:
95:37:c3:97:3f:6a:c3:0a:c6:be:b7:3a:09:bf:61:
90:6c:7f:ca:13:d4:75:44:eb:f6:08:af:ba:1c:cd:
ee:1e:ae:9a:27:86:c9:45:e0:56:7a:b8:a5:26:14:
aa:37:00:b7:ad:4f:a7:cd:38:c4:49:27:f8:3d:e4:
a7:4f:a5:14:57:5d:47:2c:f1:f7:51:40:bf:02:b9:
de:40:be:f3:29:05:c0:b5:33:e3:d5:ee:16:ad:92:
7f:c4:e8:4c:fd:7e:79:8f:ed:58:cf:23:c8:24:76:
70:bc:90:d4:d5:cf:3d:e9:5e:04:a9:ff:68:c5:4b:
29:dd:78:4e:c9:90:64:3d:84:53:5d:41:43:34:27:
ae:eb:61:49:7f:84:c1:de:fc:95:35:77:9a:9d:f4:
bc:e4:56:ed:b1:ef:b2:74:24:50:eb:6c:40:71:81:
93:b8:c4:49:17:21:cd:bf:c4:33:61:30:48:3c:db:
96:64:57:9a:12:ec:4a:c2:74:4d:f5:2f:67:b0:ce:
d0:3d:c1:24:ab:55:a7:6d:6d:6f:ba:4b:d7:2d:66:
64:ac:91:22:c7:72:38:bb:b7:7e:81:aa:5f:fd:2c:
ea:ff:da:6c:34:04:79:fb:5b:94:9b:eb:5c:b9:ac:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:E6:82:28:99:0D:64:30:B6:54:2C:0A:4D:F2:9E:E3:23:38:7F
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:c1:2a:b4:16:e1:a0:37:4d:d1:c0:50:f3:e3:21:d9:1b:
af:b6:c4:70:16:f2:10:ff:4f:91:50:df:69:3a:f0:67:18:ec:
e6:6a:94:37:5c:87:36:76:58:fd:fe:94:b0:0b:cf:ef:75:2c:
31:a2:a1:2b:e5:c3:2a:c2:10:3a:87:ca:21:7b:20:96:4e:b3:
b5:e3:d2:fa:4f:90:a4:ff:4c:df:0a:30:64:84:7c:3b:73:cd:
e7:bb:72:df:55:d4:26:72:17:95:15:20:d5:af:dc:4f:c7:0d:
d3:42:29:81:ce:4c:4d:9d:ee:79:d8:7e:ef:65:18:c1:8a:6f:
ae:ee:f6:27:ef:2d:62:9a:32:cc:48:fc:8f:07:1b:29:c8:ed:
aa:ce:49:9d:a1:11:a5:07:cf:6f:46:7e:35:57:ea:e3:d3:4e:
62:e8:63:40:36:b2:01:dd:93:dd:37:66:28:1f:40:9a:91:77:
92:d6:a5:ce:3c:d5:24:22:07:34:b2:fd:8a:b7:ad:8d:75:2a:
09:0d:54:b7:3d:c5:ea:0d:e0:96:80:b7:60:fb:98:d2:3b:ab:
a0:ab:f7:dc:ed:b6:24:39:4e:e8:b3:bb:f3:bb:de:71:aa:95:
89:8b:f0:9c:7d:12:85:45:2f:fc:bf:00:98:f6:d7:a9:fa:ac:
0e:20:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:39 2025 by rpki-client