Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier: HIdbeDKaQjacbszV73ZmMQIAmQEyRhdYfhmJ2igCA6c=
Subject key identifier: AE:3C:00:BC:3F:7E:45:E2:9D:99:EC:19:7D:03:53:1B:85:E8:3B:58
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 0194BC72F6CA4FAF6126CC7665028D47CC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number: 0DAD
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: IhchjAlH7wZG7kzQTy4JNv3HhP8.roa (hash: MX+poTln1XfrF458aN+rzETZ5ejTHBJDcPW84QX3+eg=)
2: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: uPFhLvDseUCpAnX113dHAV8V+sOOskMZbPMhP/VenJo=)
3: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (hash: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:ca:4f:af:61:26:cc:76:65:02:8d:47:cc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=ae3c00bc3f7e45e29d99ec197d03531b85e83b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:83:0d:81:ee:9b:e9:3a:02:aa:9b:8a:03:
9f:59:08:eb:b5:5c:65:c9:31:a2:01:c2:9a:90:df:
6c:51:e8:71:46:2e:8c:7d:68:c0:90:43:bf:e5:23:
08:57:ad:cc:33:a2:53:a9:db:24:24:fb:e8:8f:4a:
fa:a1:f2:bd:1e:1f:fc:93:c6:04:29:88:86:f0:96:
70:88:6a:0a:11:01:58:12:50:b2:92:ab:e2:63:bf:
21:76:42:42:86:84:3d:d3:e8:f6:7e:fa:71:0e:8f:
72:49:31:e8:80:c8:ea:b1:6a:db:e2:41:ed:6b:a8:
e6:93:32:df:a8:a8:ad:c7:75:c5:0e:ff:b2:e2:44:
37:dd:a3:09:e6:2b:29:52:45:22:8f:07:7e:33:a3:
a6:d2:b8:e3:1b:51:7e:ab:27:31:f4:7f:82:7a:64:
0e:fa:1f:ae:80:2a:25:d2:dd:af:91:31:6b:8f:fe:
97:23:0c:8a:fb:4c:b0:5a:f5:90:25:37:53:e7:3a:
ad:1a:72:f4:19:df:e2:49:01:f6:2c:ef:0e:3d:e9:
51:44:29:eb:89:38:65:3a:b6:b9:57:a1:a8:79:dc:
2f:f1:7d:10:8c:d7:d6:65:a2:fd:df:f0:1a:f3:33:
f5:27:2b:7c:3d:d0:87:2d:36:6d:7a:a9:fc:a2:86:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:00:BC:3F:7E:45:E2:9D:99:EC:19:7D:03:53:1B:85:E8:3B:58
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d5:f3:d2:61:3c:59:67:ab:dc:98:7f:f3:34:f8:c2:7b:4e:
17:ac:d9:bc:c5:1a:86:fc:f8:57:5a:46:3f:a2:45:08:e2:6e:
87:a2:f3:ae:60:a9:72:a3:96:d7:ef:50:87:5f:45:1c:e2:75:
c2:63:6c:3b:ad:bc:6f:21:62:62:f3:bb:7a:3e:c9:46:bf:44:
2c:30:eb:bf:bc:aa:fd:1b:8c:9d:39:34:c9:71:a9:d7:0d:73:
c0:01:6f:f5:ae:c3:7c:b1:ee:3b:43:ca:75:b4:22:ca:0c:96:
a8:6c:1d:d9:6c:a0:e7:d4:17:c6:e8:1b:d4:b5:e7:24:6d:31:
20:fe:45:42:4b:68:66:ff:48:27:5a:43:5d:e3:ef:57:91:93:
ec:70:ad:15:58:66:6d:00:08:37:74:21:b3:09:c9:62:de:75:
4e:f0:df:4d:98:36:24:0e:fd:87:64:e7:c8:34:48:f5:70:10:
1d:5c:e2:87:48:12:c5:72:4f:66:93:6c:3a:9c:c6:99:96:49:
55:5a:61:da:cf:46:3b:61:64:0e:33:c5:32:c5:1b:96:03:b0:
df:ca:9b:fc:2f:ee:d2:1f:a1:ba:71:d3:c2:86:43:04:d8:21:
19:99:70:b8:cf:49:d1:c3:ba:26:e3:11:eb:7b:d4:ae:30:84:
1e:6d:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client