Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: KVksiaAv/tJOSUbwoE/TCQ0MGe1ADEzBkt/EpfmMY4Y=
Subject key identifier: 2D:C4:C9:B4:F3:AE:C5:4F:11:4A:CE:84:81:06:C5:62:72:3C:D0:08
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 0194BD856AEA03556001582FC63EE24158D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: 7hcjuQpcx5MdCNXl646jjTk0pfULAdq7ixfWRq/jgck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6a:ea:03:55:60:01:58:2f:c6:3e:e2:41:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=2dc4c9b4f3aec54f114ace848106c562723cd008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:73:51:6d:4f:34:63:27:f4:41:db:9d:6b:
c8:66:c3:69:3d:b3:bb:39:62:7f:03:8b:cd:f7:e0:
b0:78:75:64:9a:a5:cf:0c:46:88:8a:37:de:ef:39:
db:30:3e:cd:a2:3e:3b:f9:27:dd:b4:39:82:f3:1c:
97:61:12:0f:0c:b6:12:32:21:90:20:ee:ab:8b:02:
25:cf:a8:61:64:bd:10:6e:46:f0:98:e3:49:8c:8a:
6c:e6:1d:91:6c:ba:2b:a8:0b:09:38:b0:4c:e3:73:
d0:b8:4e:3f:5a:72:68:12:18:23:23:49:a7:e7:e8:
12:aa:59:be:9d:96:8f:68:7f:7b:b3:f0:6c:7f:cd:
bc:db:36:bb:d0:ae:b2:ba:87:00:73:7c:10:96:24:
f1:0b:53:37:27:74:f5:3d:9e:9c:c9:93:ab:8a:dd:
fc:de:cf:28:ff:2a:68:f5:e3:a1:cc:39:02:83:89:
3c:4f:70:a1:64:41:11:42:a2:fe:a0:9a:31:64:ac:
12:24:d3:7e:6b:1c:15:73:a1:a5:f4:d4:b9:db:5a:
80:21:90:81:0c:fc:72:36:e7:76:b9:4b:5a:b5:7e:
4c:b7:05:b1:d5:ce:99:bd:32:82:33:34:07:b1:85:
fc:d4:cc:47:b7:9f:ef:db:cf:cf:ad:c5:78:8e:0a:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:C9:B4:F3:AE:C5:4F:11:4A:CE:84:81:06:C5:62:72:3C:D0:08
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3f:61:45:da:2a:74:b5:a1:b4:b1:dc:ae:66:91:d3:54:69:
a4:7c:b4:ec:c6:5a:ae:d4:a8:00:f1:47:be:97:34:f8:8d:8e:
d0:41:b5:b7:fc:5d:bd:ac:6b:2c:ae:36:be:f2:a3:84:c1:8d:
cd:9d:ad:24:65:a1:8f:9b:3c:f7:a5:56:78:c5:75:9f:75:13:
9d:bd:41:3a:de:05:26:a8:70:ec:97:b3:ba:f8:c9:0c:12:f7:
ad:44:0a:95:8f:d9:6a:eb:b6:e0:91:ce:5f:02:a5:a9:7f:04:
e6:1b:ad:b5:52:4c:0f:73:86:32:af:57:b0:f9:b2:b7:cd:e6:
e4:c8:dc:ae:69:5e:57:34:62:b5:03:ea:10:ef:56:89:4c:b0:
7f:99:0a:01:32:9a:6a:e8:70:9d:15:f8:0a:77:fe:5a:62:8c:
72:38:63:b2:d3:81:cd:3c:bf:2a:82:8c:ea:03:45:0a:0b:a2:
f5:7d:3a:d3:91:ff:d5:76:67:e9:f9:c2:26:08:59:c4:ed:63:
51:1d:34:11:32:2e:1b:11:a6:4b:85:d0:3c:6a:5c:38:2e:49:
28:52:fd:44:90:3e:b1:c8:88:f0:68:5b:88:ae:83:1e:7e:d9:
5f:55:19:7b:eb:3b:64:97:2e:01:63:77:52:40:d6:c9:a5:72:
c0:af:f5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:06 2025 by rpki-client