Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
File: 5DusShu7pWzENIYaTHaf-c4tFew.mft (raw, json)
Hash identifier: m1CzRhxdhBg53iMjezYJKaXV53nqDSrE2onhvBzjw6M=
Subject key identifier: 84:0B:F2:CB:86:F4:C8:EA:17:BF:85:59:61:E4:E1:24:11:D0:36:DB
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 0194BCE078782D3168250A8431EC1DEC5A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa (hash: oJ2JUNCDknxTjzNTxQM1bVAa79T0L1UKQs2YDAYDgxc=)
2: 5DusShu7pWzENIYaTHaf-c4tFew.crl (hash: DD0Z8WOEjvPbOTG3AOtRq9Rl+725ShOiHdY/Ve1UfSo=)
3: FkwWWQIMWtA4iybPzQx4iJn4LA4.roa (hash: dygheTAaWRRRFFcR/Y94QKMdhM+IdtEOUxFApI6osJI=)
4: nG4btH8hnfj9Xq5wDsBzy66KvCI.roa (hash: aqERMHBB2BmuiOQ91Bb+OrBKwS60vrChPD7BlEGQeXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:78:2d:31:68:25:0a:84:31:ec:1d:ec:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=840bf2cb86f4c8ea17bf855961e4e12411d036db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:b0:db:3a:f0:57:0e:28:f1:b2:df:87:2e:
fe:53:ed:82:10:94:d5:2b:a4:c1:1d:90:bc:46:40:
63:ff:8f:b8:35:26:4f:66:12:fc:3f:b1:7a:c6:98:
21:24:73:86:ae:7a:b4:3e:e4:b8:19:4c:8b:cf:80:
97:00:70:67:48:06:f5:20:ec:4c:9e:e5:b4:77:31:
4b:6c:19:46:7f:ba:c0:54:9f:eb:ab:7b:5f:3b:6f:
e6:95:b4:98:e4:b0:40:cc:2f:c4:3d:a5:a4:b9:c3:
4e:23:a5:8b:07:b1:48:90:a1:4b:8d:54:28:f4:ae:
fc:0d:aa:0a:11:e9:cb:04:8a:4c:4c:86:00:8c:f4:
69:97:57:8c:22:e8:0d:40:6a:36:bb:f4:ef:34:99:
8a:14:e0:fb:b4:66:d8:9c:8c:a8:ad:2a:1f:e3:a3:
95:71:95:fd:d4:2c:8a:65:f1:e7:b7:39:05:e3:39:
3b:c2:11:50:72:59:d9:30:89:70:74:f3:11:59:f5:
58:e9:12:38:74:e7:cf:96:51:96:f3:69:f9:8c:47:
e8:06:df:ce:38:47:83:00:9f:d8:ca:83:7f:f3:4a:
e3:10:4d:47:49:72:63:e9:c5:29:83:31:c8:a8:4b:
3c:10:65:29:55:da:9e:dd:80:68:32:96:da:00:0c:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0B:F2:CB:86:F4:C8:EA:17:BF:85:59:61:E4:E1:24:11:D0:36:DB
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:52:07:0f:4b:70:0e:e8:a5:47:c9:f1:0b:a4:ed:87:94:aa:
53:0b:6d:f9:24:2f:0d:b3:8f:9c:5b:38:df:ac:f9:95:42:75:
3c:3e:cd:a6:b7:f5:f1:2f:7e:ca:06:17:ef:74:d9:ae:78:5b:
29:1c:48:7c:45:76:9b:06:b9:d8:41:a9:ee:09:15:c6:03:6e:
fb:9d:b7:c2:b8:5f:96:39:d3:4c:89:dc:b1:b8:a6:ea:90:51:
c6:ad:04:0a:93:07:8b:5d:d5:28:9c:85:4f:eb:68:ab:3c:54:
b4:29:bb:f9:ec:7a:7b:05:90:ac:bd:f1:e6:16:c4:54:e9:5a:
da:d6:1f:ee:06:01:7d:d8:b3:7b:b5:d4:1a:c1:94:54:99:04:
0b:b6:55:bb:dd:2a:5e:8f:3b:bb:db:81:50:fb:a2:7a:48:58:
43:c3:f8:a6:fd:64:37:a5:12:c0:aa:34:8b:03:51:d1:8d:a9:
1f:11:5f:8c:96:54:bb:54:52:db:21:bb:9d:6a:a2:3c:2b:0f:
14:15:e0:68:de:02:66:f2:94:14:f1:29:3d:80:96:04:e6:98:
db:61:66:45:de:0b:53:d9:d2:54:a4:57:5e:64:38:cb:19:d7:
c6:b7:9d:2e:20:86:6f:b1:da:c8:9a:49:77:8f:1c:d8:84:90:
64:81:1b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:09:06 2025 by rpki-client