Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: GvfeRwpQ25zLr43vzRaY8eZyF8zrP7uKRO19bu0yNR4=
Subject key identifier: F2:BF:A5:8A:75:CB:2E:08:AC:4C:C8:F8:0C:0E:59:27:91:F1:5F:9B
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 0194BD17BA5FA9C1D4031328034A264888F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: ZBRS+/kTOhZL3hAmlECDcrAzAhlrcJD5c5IqTYexhZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ba:5f:a9:c1:d4:03:13:28:03:4a:26:48:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=f2bfa58a75cb2e08ac4cc8f80c0e592791f15f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:41:e6:a4:88:05:eb:84:21:6d:2a:e0:72:
10:46:75:ea:9c:4f:35:66:7d:4d:8a:74:84:25:51:
73:f6:70:12:99:71:ae:3a:c5:66:5f:8d:6d:ce:d2:
01:9e:b2:0e:b1:9c:21:56:68:13:f8:ad:08:10:1b:
64:30:b5:26:35:7d:ef:90:88:ef:00:a0:6f:ff:4f:
7e:19:53:3d:dd:56:79:ae:b5:93:5f:2a:d4:36:c1:
d5:ac:bb:df:e3:a6:df:66:23:b0:ba:2f:4b:fe:e4:
40:10:13:b1:5c:8c:f7:48:9b:6e:06:86:ce:71:00:
b0:94:bf:b1:d1:5d:34:47:e6:4b:19:fd:9f:1d:79:
2e:27:e1:36:9d:a5:dd:2d:d3:30:f1:60:f8:7a:c6:
36:92:39:49:c5:05:24:79:bb:10:0e:a6:ae:5a:05:
d6:89:4b:ff:9f:b0:f7:ff:45:bb:a2:27:16:ce:e0:
bf:f1:fd:8b:c0:04:c1:68:cb:51:56:a4:79:30:22:
e9:07:04:75:f0:df:ea:16:a9:68:95:44:9b:ea:a6:
85:dd:33:67:8a:2a:65:7b:97:cc:98:41:f5:29:7d:
62:76:6d:8f:9f:6c:ef:f0:ac:97:87:3d:e6:53:51:
2e:3e:0e:0e:75:ff:11:e9:78:6c:6c:6e:b5:92:15:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:A5:8A:75:CB:2E:08:AC:4C:C8:F8:0C:0E:59:27:91:F1:5F:9B
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:10:fe:e4:9c:17:ce:bc:ee:8e:a9:2a:c3:06:57:98:93:
fd:19:c6:0e:a2:56:a6:c5:91:3d:75:6c:19:14:1d:97:10:0e:
4e:3f:53:25:e5:6f:9d:49:08:c6:5e:4b:9c:14:76:22:07:d8:
37:d6:f3:80:9f:59:97:66:18:81:9f:6a:aa:02:75:d5:b0:f3:
cd:7e:35:c9:68:10:51:4d:67:ec:13:b6:3a:1a:ae:f9:7b:14:
aa:ac:b3:0d:bd:b4:d3:50:7a:6e:b0:7f:ef:56:dc:db:27:f3:
b5:1a:64:9d:d0:c9:4f:64:1e:e7:a3:f0:dd:2d:05:89:98:62:
eb:c2:3f:24:04:3e:9a:34:ac:7a:e7:8c:e9:80:f4:cc:62:cf:
b5:45:ab:2a:9b:b5:15:d2:98:f8:e4:fb:32:46:0a:0a:92:cd:
03:c8:b6:b4:c9:f2:cb:87:21:ca:e9:80:2b:41:0a:42:8c:45:
0b:e4:91:ce:7e:e7:68:7d:8d:7c:3b:84:28:d4:bc:0a:5b:ed:
d7:1e:0a:61:86:0d:ed:ec:1c:ce:ad:9f:c2:25:0e:66:8a:73:
25:5e:de:de:94:09:b6:00:75:35:0e:2b:dc:1e:56:f9:44:1b:
8d:db:28:e1:2a:e1:65:90:92:74:37:5d:67:b5:56:8d:48:14:
11:3d:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:46 2025 by rpki-client