Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json)
Hash identifier: u+rWu1OQIiHcW3J2tvIJCT6fZGkwY3Yqiz6t/OXXZXw=
Subject key identifier: B1:B2:42:5D:4F:4B:FE:A1:BA:55:0B:F8:73:91:9E:C2:7F:7F:86:ED
Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c
Certificate serial: 0194BD85911230B50CD75BFC769BEF263DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
Manifest number: A1
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=)
2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: ey9zhTpanZdhCtukQzyC7X1T1LMUe5aRFi2ekz68k+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:12:30:b5:0c:d7:5b:fc:76:9b:ef:26:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=b1b2425d4f4bfea1ba550bf873919ec27f7f86ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:bd:2e:a5:62:ff:e8:8f:95:5f:58:77:69:
1a:64:e5:f3:0a:08:1c:09:f3:89:43:16:ec:9a:47:
08:be:72:29:74:c0:96:36:cf:c7:a2:ff:3f:88:e6:
b4:a6:8b:60:29:ed:19:9b:e6:43:e8:a7:8e:e7:52:
0c:a7:ea:ae:3f:1e:d0:f7:d5:ac:7f:f0:0d:0f:e1:
9d:e4:e0:83:c9:05:17:43:42:b9:6e:89:9c:6a:c1:
57:c2:95:33:4d:d9:a9:06:b5:8f:2c:39:bf:fc:a0:
1f:06:12:3c:7a:75:67:f5:ef:c0:cd:bb:28:a0:1b:
7f:42:43:40:78:b3:37:ad:40:e5:40:e5:d9:9a:e7:
fb:62:a6:64:0e:a1:0e:a3:d0:62:c3:37:4e:b5:28:
23:d3:c7:b6:e2:31:ef:a4:38:c0:7f:20:65:5d:1c:
93:2e:5c:d8:71:25:90:4b:5d:50:74:8d:93:7e:35:
c9:fa:01:4f:f1:9f:41:ec:8b:42:7d:54:a0:50:e6:
87:07:d5:21:d7:24:0e:bf:f5:96:e9:78:81:79:1d:
c6:85:c3:b5:c7:36:72:02:d6:0e:ac:e7:8b:c9:c7:
c8:6c:f0:d0:ce:72:56:eb:8c:f6:82:f9:be:e3:d3:
24:49:9f:84:3b:58:19:66:12:00:98:04:8a:e9:bf:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B2:42:5D:4F:4B:FE:A1:BA:55:0B:F8:73:91:9E:C2:7F:7F:86:ED
X509v3 Authority Key Identifier:
keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:c0:9f:62:26:ee:ed:86:21:6d:70:5e:db:32:6f:48:16:
8b:8f:1b:3a:7e:96:bd:75:14:1f:ce:a8:d9:be:73:99:ff:d0:
74:05:72:f4:f9:92:a1:c0:44:9a:ca:ad:3f:e1:84:4c:44:17:
a8:4e:f2:f8:d3:f4:41:60:0d:39:c7:d5:dd:a1:77:cc:d9:6d:
a9:60:7a:28:23:8f:cf:f0:bb:d3:c6:21:d4:1d:d5:75:1f:97:
4a:88:57:77:b5:0b:62:56:f3:a4:44:62:69:c3:f9:45:5c:38:
ff:b2:d0:71:5d:c4:83:d7:a6:42:ac:70:7a:74:6e:87:46:a4:
23:3f:3a:2d:31:6b:a9:c5:7e:48:56:44:39:75:c9:91:71:53:
22:c9:ec:e5:89:ee:17:e8:39:09:d8:55:78:f2:fc:b7:23:ce:
5c:5a:d2:74:28:71:4c:b2:01:8d:ed:2f:52:d7:d3:7e:41:8c:
41:6a:30:c8:af:91:18:56:86:2b:c2:80:0c:0c:39:e5:6b:6d:
7d:46:01:47:90:3c:71:2d:37:5e:fc:31:ca:b4:4d:bf:b3:30:
24:f7:7f:5e:52:a1:7b:c7:4f:a3:f5:07:22:55:7d:84:4a:fb:
53:91:c0:fa:de:45:22:c9:f7:a3:d5:4c:3f:35:70:82:2f:5d:
dd:fb:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:48 2025 by rpki-client