Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
File: cV35qvnRzRfKQMlSrY9x8KNDK7c.mft (raw, json)
Hash identifier: BcTya/gGfOnf3SL8abrfM0fIXwZl/uruSFI7aupJD0M=
Subject key identifier: A0:E5:90:91:82:20:CE:1E:19:0C:38:AA:54:38:F1:34:61:6D:BF:CA
Authority key identifier: 71:5D:F9:AA:F9:D1:CD:17:CA:40:C9:52:AD:8F:71:F0:A3:43:2B:B7
Certificate issuer: /CN=715df9aaf9d1cd17ca40c952ad8f71f0a3432bb7
Certificate serial: 0193E34BD124D5ABFF8E10011E4A3056014C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV35qvnRzRfKQMlSrY9x8KNDK7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
Manifest number: 13BC
Signing time: Fri 20 Dec 2024 09:00:16 +0000
Manifest this update: Fri 20 Dec 2024 09:00:16 +0000
Manifest next update: Sat 21 Dec 2024 09:00:16 +0000
Files and hashes: 1: FfhQiam0ORAtBXuGVuevyjgRNHI.roa (hash: D0+zwDDRmGWhfykGCDXAXAZSEjPw9sSshAdk+zUh8H0=)
2: cV35qvnRzRfKQMlSrY9x8KNDK7c.crl (hash: pK5iKTeWZQjb3kKEYaj8oMy6nXcHga9jTgTVdLWNA1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:4b:d1:24:d5:ab:ff:8e:10:01:1e:4a:30:56:01:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715df9aaf9d1cd17ca40c952ad8f71f0a3432bb7
Validity
Not Before: Dec 20 09:00:16 2024 GMT
Not After : Dec 21 09:00:16 2024 GMT
Subject: CN=a0e590918220ce1e190c38aa5438f134616dbfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:4d:4b:f9:6d:8b:c3:17:22:82:86:91:6d:
cd:b8:26:c2:e5:0a:88:b1:3b:00:44:e9:ed:51:b4:
cb:13:82:06:58:9a:2e:5f:df:cf:9e:18:a6:00:ca:
3c:e7:4d:83:21:87:ea:e6:32:ff:20:68:d0:21:31:
d6:c2:4a:67:10:5f:df:f1:40:2e:91:72:a6:5d:f1:
7f:e0:c1:15:ea:77:1f:42:39:16:89:dd:48:dd:2f:
7a:7c:3d:e0:a9:2a:a2:95:07:bf:58:7b:57:f5:47:
60:50:78:62:7f:f0:a1:84:5e:fd:41:f1:80:e5:44:
d2:ce:b4:60:b1:1d:b3:e2:60:17:01:40:4d:e1:ba:
2b:63:d4:d7:8c:36:38:cb:60:8b:f9:8b:44:33:56:
f7:25:9d:bb:06:9b:3b:b1:8b:23:47:b6:89:ea:3b:
99:b3:51:42:3b:dc:92:ca:86:bb:8f:de:8c:3a:c9:
f8:49:d8:b4:6a:8a:cd:04:e7:04:36:67:0f:ec:fa:
fd:7e:34:ec:f9:44:75:08:ea:19:3b:79:7d:43:ff:
f2:a9:63:81:18:af:88:ee:3d:53:ba:3c:02:d9:94:
76:4d:51:fe:08:90:13:df:ec:ac:c6:ad:85:15:25:
d2:19:f1:bd:f2:15:08:ba:e1:78:27:12:62:29:e8:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:90:91:82:20:CE:1E:19:0C:38:AA:54:38:F1:34:61:6D:BF:CA
X509v3 Authority Key Identifier:
keyid:71:5D:F9:AA:F9:D1:CD:17:CA:40:C9:52:AD:8F:71:F0:A3:43:2B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV35qvnRzRfKQMlSrY9x8KNDK7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:57:13:61:19:02:16:36:1b:11:78:79:28:a7:87:59:83:
9d:8b:c7:02:e5:87:77:0c:a5:ab:1b:8f:aa:10:91:c4:b3:fe:
41:c1:53:68:2d:37:25:de:19:fa:c7:7a:0d:d5:5d:18:4f:d1:
c8:a9:8b:02:3b:be:34:0b:79:b8:10:60:f8:cb:ec:b8:6f:a3:
60:3d:a1:c6:41:6f:fb:23:17:32:fd:53:88:63:31:c6:45:6c:
49:14:2e:98:a9:97:c9:48:72:ac:ca:f3:4f:43:1d:ab:ef:7e:
0e:d0:78:ec:68:03:9b:68:e4:e4:01:8a:b7:5f:09:2e:ef:e9:
f8:eb:53:ff:f0:04:42:00:26:c9:0e:49:59:d9:31:02:b9:39:
10:81:7a:30:20:ba:c8:9d:9c:87:9d:c1:0d:6d:0c:fa:d8:52:
79:69:60:d7:e7:f4:9d:7d:15:85:0d:87:e9:3b:16:29:d2:ca:
ba:9d:2f:e5:f3:03:ed:71:55:75:fd:5e:c6:ee:cd:de:36:c5:
31:10:d5:2c:c5:1a:c4:04:1d:d0:dc:2f:31:40:f7:86:cb:33:
63:07:4a:0a:c6:96:3f:8d:3e:fb:76:f3:23:64:6b:a5:dd:a4:
42:14:36:3a:20:41:89:e4:ca:1c:30:1b:a2:6a:9f:68:2a:07:
56:2f:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:14:30 2025 by rpki-client