Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: IpgcQBUyBbJjjwPc/cvV53FYN8Fl4Xs5UUHqqrLqimM=
Subject key identifier: 07:80:B3:0D:9C:9D:32:54:07:3C:BE:64:BA:D3:6F:7E:01:9C:89:29
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 0194BD1760D930981E73B1A823689B05798D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0451
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: myO3zCHvLUk98FOrHG4MhDdgKyyNPTzfBsQUwgtE9q8=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:d9:30:98:1e:73:b1:a8:23:68:9b:05:79:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=0780b30d9c9d3254073cbe64bad36f7e019c8929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:1c:ba:43:ef:e7:61:d8:ac:01:2c:4f:76:
09:a6:ef:5a:3a:42:bf:1d:2c:e7:e9:7d:8a:b2:9d:
1f:11:8d:a8:74:48:a1:0d:a3:a2:97:50:66:0e:d2:
0d:aa:f5:d7:a2:59:d5:9f:9d:98:44:b6:0a:6c:ed:
23:6a:f1:59:30:b6:4d:06:04:2c:a9:b6:2a:67:6c:
de:dc:92:79:64:f2:ba:59:c4:26:ca:e5:99:ff:7f:
f2:9f:69:eb:c6:3a:19:03:01:b2:18:a9:05:43:99:
e8:79:9f:cc:49:58:f5:04:42:fd:ed:7b:ef:2e:aa:
27:ed:8d:46:28:5b:ac:d9:6f:54:86:23:99:0f:42:
f6:a5:e3:1b:4f:5d:c5:af:7a:48:e6:98:75:39:c1:
f4:d1:72:81:42:ea:1c:fe:d2:95:14:c1:e9:62:8a:
d4:d6:df:4d:91:67:14:c6:70:45:e5:1c:9d:04:03:
39:e8:de:fa:d1:17:9b:63:de:00:61:5a:7d:b2:60:
85:01:10:fd:e4:f2:30:4e:63:95:4e:3c:6a:81:77:
85:d4:e0:03:9a:76:94:c9:cf:56:52:c1:26:6d:3c:
bf:76:28:4f:2b:5e:62:c5:0f:21:91:7a:36:20:b4:
69:72:aa:64:11:09:2c:8e:2a:da:34:95:05:de:64:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:B3:0D:9C:9D:32:54:07:3C:BE:64:BA:D3:6F:7E:01:9C:89:29
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:99:d8:4c:e1:41:a9:db:cb:41:fc:f8:78:63:55:7c:a0:86:
fd:d0:46:71:e4:80:ff:9d:e1:ce:38:24:d8:83:1a:4d:13:7c:
d5:0a:9b:f0:d2:cc:47:ec:ff:26:6b:60:87:6d:f1:9b:7b:fe:
a0:65:d7:6d:64:8a:fc:2d:68:c5:f2:63:fc:ef:2e:f4:e9:05:
73:21:7d:30:bb:84:7b:a9:9a:5b:33:bc:10:58:44:2c:46:96:
af:14:31:53:9f:39:14:3a:84:74:05:3d:66:5e:da:47:63:b9:
a1:ce:36:0b:4d:3c:c3:c1:0f:c3:f4:49:b3:e6:fd:a7:2a:4c:
53:97:08:74:bc:ed:e2:dd:8a:3f:b5:cc:a7:a2:0f:c2:77:27:
e0:23:cf:f3:21:72:0f:9c:d4:0b:34:6f:21:f8:29:c3:3c:e8:
4f:08:1d:a8:29:c3:e1:d4:64:28:d2:c5:e2:71:d9:40:e6:d0:
2a:e7:dc:fd:dd:2d:b0:b3:07:8c:bf:dd:29:16:0e:4e:75:67:
72:34:94:53:34:e3:93:46:79:60:91:45:29:56:79:d2:f7:17:
67:b6:01:f3:13:ea:9e:19:a5:91:29:d9:45:97:20:ce:d7:36:
47:e9:3f:7d:79:23:da:82:17:b8:e4:3d:bd:8b:10:35:23:db:
47:1d:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:27 2025 by rpki-client