Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
File: 5L3Wsev8lYmaWDM9yUz4Khmms74.mft (raw, json)
Hash identifier: oDUn1P6JgolU/R4qcuGBhCWKNFLK/lQGKjcoUd5NgzU=
Subject key identifier: 07:9D:F3:A4:BC:F4:CF:56:3E:74:30:14:F5:40:73:A9:E6:2F:8B:C4
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Certificate issuer: /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial: 0195C6BDD12CCA8F96698A1321226460B817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
Manifest number: 14B4
Signing time: Mon 24 Mar 2025 06:01:23 +0000
Manifest this update: Mon 24 Mar 2025 06:01:23 +0000
Manifest next update: Tue 25 Mar 2025 06:01:23 +0000
Files and hashes: 1: 5L3Wsev8lYmaWDM9yUz4Khmms74.crl (hash: SYJ/RI1Jdk+hdQtC8/39Xb4kHEwyqvZ5T40EdWmBLlw=)
2: Zz3HRJEWGJPFErfU7R4aniiCzDY.roa (hash: Nezp+iSBDSMEyKoKKG0lB6PmXl7EPhVCaj0cWRCfPFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:bd:d1:2c:ca:8f:96:69:8a:13:21:22:64:60:b8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Validity
Not Before: Mar 24 06:01:23 2025 GMT
Not After : Mar 25 06:01:23 2025 GMT
Subject: CN=079df3a4bcf4cf563e743014f54073a9e62f8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:51:1f:70:dc:d4:03:ef:58:26:ea:59:29:
66:5e:f5:16:0d:38:de:fb:70:2a:4f:38:81:bb:96:
5e:36:64:ad:aa:88:c6:b9:04:4f:c7:91:60:6a:89:
76:65:13:ea:68:fc:84:59:e1:07:55:49:d6:17:2d:
d7:b4:e1:72:40:c0:08:fe:c7:a9:3b:52:b9:67:88:
12:8b:a6:dc:2b:09:cb:e4:db:9e:7f:86:18:d0:41:
f5:c8:30:df:da:62:8a:29:aa:c4:5c:d9:a9:dd:f8:
bb:cc:41:d5:c9:66:23:6a:a6:f5:89:56:dc:f0:e2:
bb:32:8b:64:99:9c:c4:6f:dc:24:cf:7f:34:53:70:
f9:99:70:69:61:55:36:9a:e1:1a:0f:e4:44:29:92:
7d:a4:2e:93:28:1e:11:e2:c5:c1:f7:cf:46:6a:57:
8e:f5:dd:7a:47:9a:05:e2:5a:ed:a5:c6:35:53:3b:
f0:06:06:f8:79:1b:09:85:50:f5:30:f9:86:f8:2a:
9c:db:db:67:70:f5:ce:5a:37:07:b5:e2:86:1a:0c:
3b:37:d9:40:ff:89:96:31:0c:a3:ef:18:7e:e6:f2:
dd:1c:d3:90:60:a1:f7:bf:5e:a7:3b:c2:5a:20:f7:
90:4d:4f:b7:6f:ad:58:6c:52:74:b6:3d:aa:3d:5b:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9D:F3:A4:BC:F4:CF:56:3E:74:30:14:F5:40:73:A9:E6:2F:8B:C4
X509v3 Authority Key Identifier:
keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d5:ba:b8:41:ab:78:35:bf:df:21:40:84:f3:57:1d:67:78:
af:f4:26:99:56:79:61:aa:fd:c2:1b:f0:98:49:77:48:35:e7:
50:5d:33:a5:b2:2d:63:b8:db:d6:49:7a:11:10:b5:36:a3:61:
3d:9b:c9:e9:bc:62:a4:15:e0:83:74:6c:5d:0d:f7:a6:d1:21:
e2:61:92:3b:b8:b0:73:d0:19:2c:f9:12:e4:e6:2a:ee:fd:a3:
e6:76:dd:b1:1d:57:5d:6e:3f:0a:a9:d2:a1:d2:e0:59:5c:fa:
3f:f7:c6:5e:65:36:b0:fa:99:85:61:c7:d7:3f:59:96:cf:c1:
15:cf:00:8c:f7:21:f5:98:9a:a8:cf:fa:49:57:3a:53:42:99:
ec:7f:5f:a7:3d:f1:e8:4f:08:57:70:ff:d6:10:b0:6c:95:fe:
e9:78:e3:80:05:ed:28:2f:15:4e:44:68:40:4c:0c:6d:82:bd:
ef:7e:e7:6a:f1:9a:3d:d4:58:35:97:0a:cd:08:14:f1:60:b6:
a4:71:b6:8e:4f:16:e7:95:fa:34:cd:a1:4e:58:5a:21:9d:da:
cb:af:64:f0:c0:34:d2:28:0c:4f:83:ff:04:de:0e:42:55:3c:
6b:a0:cf:a3:7a:fc:32:26:15:83:19:5b:64:fd:71:4e:98:a0:
44:8b:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:47:49 2025 by rpki-client