Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
File: Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft (raw, json)
Hash identifier: uWv589pfhF6XT4t6Z1waJ7oRevujgYZ/AJGAtBqnCHg=
Subject key identifier: 0E:33:C2:7E:67:7A:78:84:5C:8A:A7:33:A4:0D:1A:DD:AA:C2:AF:37
Authority key identifier: 46:5E:78:A5:EC:57:23:1C:69:3D:65:45:44:61:8C:67:82:D6:19:0A
Certificate issuer: /CN=465e78a5ec57231c693d654544618c6782d6190a
Certificate serial: 0193E195AF8C1A97101764F93C4C45460235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
Manifest number: 13B9
Signing time: Fri 20 Dec 2024 01:01:43 +0000
Manifest this update: Fri 20 Dec 2024 01:01:43 +0000
Manifest next update: Sat 21 Dec 2024 01:01:43 +0000
Files and hashes: 1: 4uY6lMAh_e52EUp62SENplOwcmA.roa (hash: xDQpk1WwxqQIUcd7x3MrZNbpR1nDBdFaNKGUejzB//4=)
2: Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl (hash: zsp5pV5f5J2PZKNLLZ4AY/NgKay1u4NCSuvyx5croKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:95:af:8c:1a:97:10:17:64:f9:3c:4c:45:46:02:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465e78a5ec57231c693d654544618c6782d6190a
Validity
Not Before: Dec 20 01:01:43 2024 GMT
Not After : Dec 21 01:01:43 2024 GMT
Subject: CN=0e33c27e677a78845c8aa733a40d1addaac2af37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:2d:66:3f:e9:04:ef:5e:31:56:46:6f:28:
3c:00:08:f8:55:2a:95:94:f9:4b:ef:51:15:01:fd:
10:b1:59:0b:90:c9:b8:9e:be:a6:e6:59:29:0b:9e:
63:2c:11:dd:fe:47:5c:67:ff:ef:54:d9:a9:30:7e:
e6:f4:e0:fd:31:74:5f:ce:41:59:15:d9:ea:7a:a3:
96:84:45:c8:f6:c1:f0:ee:c7:eb:e0:ec:8d:0c:89:
0d:57:83:6f:02:e8:04:9a:b4:73:fd:1e:fa:a3:ca:
7f:b2:c2:60:29:15:a4:4f:eb:9e:02:31:1b:75:ac:
a2:47:b2:79:e4:5d:e5:87:3c:0f:e8:28:e6:ab:46:
66:64:c0:8b:9a:25:6c:31:33:da:12:c1:51:81:44:
cb:2f:41:a8:67:09:16:6c:25:23:ff:2e:80:5c:14:
87:be:13:82:9a:42:37:dc:3c:00:c1:c5:2c:80:a7:
6c:9d:d5:68:7e:07:e2:fd:ed:50:24:8e:28:bf:d3:
0e:12:03:45:00:24:a2:aa:91:51:91:a4:32:ff:ad:
2a:56:d2:c3:12:00:ad:8d:57:17:65:21:0a:e8:28:
64:01:fc:a6:cd:6a:ac:87:6d:00:9c:f2:df:c3:3e:
58:a9:48:c0:2c:8d:74:40:8d:b6:aa:06:47:8d:3f:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:C2:7E:67:7A:78:84:5C:8A:A7:33:A4:0D:1A:DD:AA:C2:AF:37
X509v3 Authority Key Identifier:
keyid:46:5E:78:A5:EC:57:23:1C:69:3D:65:45:44:61:8C:67:82:D6:19:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:46:29:d9:bc:d5:fd:b8:bb:df:02:da:47:58:1e:1b:25:e6:
c5:9d:df:bf:53:5e:a6:ff:6b:11:d2:5d:10:a7:c8:98:df:23:
bf:11:84:dd:3d:43:b7:e4:39:f1:39:02:18:14:d2:39:8f:fa:
8a:14:67:14:15:1c:c4:3d:ce:32:a3:48:7b:16:71:8a:57:59:
46:d9:eb:06:75:d7:f6:93:84:f7:c4:f3:9f:dd:61:d0:8c:ea:
4d:06:1b:ef:66:24:4a:27:ea:fb:09:7d:90:ee:19:4e:b2:45:
4a:bf:b0:c7:01:6a:20:89:56:88:bc:9f:16:55:71:b5:b7:b3:
54:4f:ea:f6:95:de:eb:50:04:e8:6b:37:d7:bb:aa:bf:42:c0:
42:08:f8:e7:8b:c2:e3:a5:e5:20:82:cb:2c:ce:d7:82:5d:5f:
ef:51:35:c5:c7:a5:5c:6a:7d:12:81:2b:eb:34:47:cb:df:99:
58:d0:98:26:52:6b:21:62:76:72:cc:3b:48:d0:cc:44:e0:57:
23:94:36:08:93:a0:7c:5b:bb:25:01:ad:75:40:e9:c6:a4:e4:
db:bb:ab:85:51:2f:23:78:c8:1a:c0:02:9b:e9:e4:8e:9c:4f:
d8:00:9e:7e:f2:60:eb:8a:2e:14:39:08:3b:b8:05:74:cb:30:
dd:3f:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:55 2025 by rpki-client