Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
File: rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft (raw, json)
Hash identifier: /q1DoO9P3hL9i3DQZXh9Phk6BNRL7nVTQyMMJc9ZhfQ=
Subject key identifier: 94:FE:85:47:F7:3C:7D:46:37:26:6D:1D:54:38:2D:20:EA:CF:C1:6E
Authority key identifier: AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
Certificate issuer: /CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Certificate serial: 019514DAB27BBED214B9E530100ECB9169B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
Manifest number: 1332
Signing time: Mon 17 Feb 2025 17:00:31 +0000
Manifest this update: Mon 17 Feb 2025 17:00:31 +0000
Manifest next update: Tue 18 Feb 2025 17:00:31 +0000
Files and hashes: 1: nKkoxtAcsP_tHlqE57CDenLXG04.roa (hash: ZhFG6u5NdQDnITb4OAUdu1m1nUTdZyt00LAJ5rE5RT4=)
2: rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl (hash: yynWlOPncdRyA6oab7N7XJkKwFxON8FVMzhbcH8l7W0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:da:b2:7b:be:d2:14:b9:e5:30:10:0e:cb:91:69:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8bfa86618abd7fab5953f7b565fcb6e4b46851
Validity
Not Before: Feb 17 17:00:31 2025 GMT
Not After : Feb 18 17:00:31 2025 GMT
Subject: CN=94fe8547f73c7d4637266d1d54382d20eacfc16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:f8:d1:e0:dc:0d:2f:43:bb:ae:11:6b:29:
01:c6:f4:25:79:d5:1e:f8:7f:2a:42:74:cd:30:64:
b6:76:d8:cf:85:f7:9f:28:c7:60:07:c2:ea:e4:dc:
61:8c:5b:64:b6:37:a9:da:61:a4:fe:94:bf:ce:3f:
1f:86:00:94:fa:45:ab:1c:ec:36:0d:05:5d:c5:9b:
d1:ce:5f:6b:90:e2:f2:b6:6e:0d:52:ff:48:dd:2a:
1f:97:ef:51:b9:7c:cc:4c:d6:21:d4:16:5e:88:8e:
67:97:8a:39:40:c8:70:87:5d:db:56:be:45:b9:e2:
ec:c7:03:41:f4:26:de:a4:fd:f0:e6:dd:24:ea:75:
5a:a0:fb:6e:11:7b:fe:13:c3:64:a6:7e:eb:44:cc:
ea:c1:51:62:c7:92:5b:ef:96:af:b7:4b:f4:d1:50:
9c:26:c7:89:d5:3f:a2:37:d6:5b:9d:66:aa:0c:63:
36:fe:ef:1c:e0:d6:f5:10:91:71:57:0f:3d:65:d4:
0c:0b:99:b1:61:d4:5e:0c:68:01:a7:71:34:73:5e:
f6:2e:cb:1a:a3:6e:12:77:1f:0c:a0:b3:26:ea:b5:
62:9d:58:1d:0a:60:cf:06:ec:99:7f:7e:9d:c6:3f:
cc:1c:70:b5:fe:01:58:54:d9:22:74:74:53:af:a9:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:85:47:F7:3C:7D:46:37:26:6D:1D:54:38:2D:20:EA:CF:C1:6E
X509v3 Authority Key Identifier:
keyid:AC:8B:FA:86:61:8A:BD:7F:AB:59:53:F7:B5:65:FC:B6:E4:B4:68:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIv6hmGKvX-rWVP3tWX8tuS0aFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4043b0-a30a-4147-8ef1-482548f52da6/1/rIv6hmGKvX-rWVP3tWX8tuS0aFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8b:3d:97:08:59:be:2a:e0:30:2a:65:91:ce:34:07:ac:15:
f1:8f:d6:c6:38:86:53:b0:be:fe:c1:98:af:78:81:b1:a0:67:
38:33:4e:84:98:6f:aa:52:d1:10:99:9a:68:4c:c1:39:11:7e:
ff:9b:f1:a4:2b:46:3b:7c:4c:3d:b9:76:e4:95:f4:6e:99:89:
58:2a:ab:8d:c2:6b:be:8e:52:18:34:d7:4f:51:04:1d:58:62:
19:78:5d:6e:92:e9:10:d9:ad:0f:53:15:84:a8:6e:f1:f8:17:
94:f3:8e:75:87:ab:44:fd:eb:7b:11:c9:9c:48:d5:9a:d5:93:
3a:6c:e5:5c:01:74:13:74:26:ab:79:bb:f1:70:ff:82:0a:fb:
c1:b2:44:e8:9c:fb:9f:ea:0c:b2:c5:6f:10:87:6b:66:41:69:
f6:fe:d3:57:cf:7a:22:08:27:17:44:60:31:ec:86:e3:f0:19:
1a:dc:39:41:35:46:1c:02:8b:0b:31:8b:08:75:05:a6:5b:41:
54:ff:68:b8:f6:22:ab:55:8e:d4:dc:3d:41:ed:7c:14:5a:e7:
ec:b8:f2:7b:e3:0c:86:8e:8e:42:a3:41:25:79:05:54:60:42:
cf:1a:a5:5f:89:b2:64:64:39:34:aa:c0:58:b9:f8:8e:ee:fc:
54:eb:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:05:48 2025 by rpki-client