Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: kAvBHEht093+Q7geH2iLD6ps8vs+TFrjwd6Rg2/gjDE=
Subject key identifier: 08:E7:0F:FE:3F:DC:7E:EC:5C:E5:58:BE:45:9C:8B:91:0A:D7:E5:3E
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 0195E0EB1E4E8F727DCAD4D587B2C4D43C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 0A36
Signing time: Sat 29 Mar 2025 08:00:59 +0000
Manifest this update: Sat 29 Mar 2025 08:00:59 +0000
Manifest next update: Sun 30 Mar 2025 08:00:59 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: Q3HXCD7Iwms0wLnYOulyZBLsWN8m4zYXeXqbyJF6cYs=)
2: PMNnc8UiTx_1PdJEiYIJsVqvM18.roa (hash: glo0oQZnzXQ/WEXl4o++QXVkyGkwmaHI6OvTjJhSMHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:1e:4e:8f:72:7d:ca:d4:d5:87:b2:c4:d4:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Mar 29 08:00:59 2025 GMT
Not After : Mar 30 08:00:59 2025 GMT
Subject: CN=08e70ffe3fdc7eec5ce558be459c8b910ad7e53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:b4:3c:c8:17:0e:96:8a:db:00:81:0b:c3:
76:f4:4e:0c:14:2e:b9:a5:3f:61:83:d0:96:c0:0a:
57:1b:0f:2c:da:24:32:ba:ca:ca:a2:28:85:5f:2b:
4d:7f:0b:a0:0e:16:b6:fd:36:61:fa:62:28:c3:91:
3d:98:b2:e8:6c:f9:f3:49:c6:5e:5e:57:e5:89:09:
e5:6c:6a:06:ee:b0:0f:e3:71:c7:28:00:23:e1:41:
7f:22:66:3f:eb:33:f7:c4:a3:94:75:5d:70:f3:22:
b8:19:5c:14:b8:8a:f1:56:cf:04:ba:89:c9:0e:ee:
10:8d:71:f2:7c:46:22:d3:11:a0:fd:74:b1:95:56:
4f:68:a0:62:84:16:e9:f1:5d:bc:0c:1b:5c:90:eb:
7d:df:d1:e0:c2:fe:65:de:e3:62:3c:5b:36:5e:3b:
d7:60:eb:45:03:98:72:43:0e:5e:e4:6e:da:a7:ef:
4b:29:2f:b3:8f:73:53:74:96:29:3f:b0:a9:85:82:
c4:1c:5e:0a:e3:6d:83:86:e5:75:55:06:c1:45:48:
99:03:83:92:20:61:82:44:c9:78:e4:ca:3d:bf:73:
0c:94:ba:fc:6a:71:83:73:12:97:fe:a1:3a:7d:e9:
02:06:61:0f:59:e0:a4:8f:e6:f1:7e:a7:f0:1a:30:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:0F:FE:3F:DC:7E:EC:5C:E5:58:BE:45:9C:8B:91:0A:D7:E5:3E
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:cd:fc:46:0c:51:4e:49:be:88:95:7c:2c:24:3d:45:8e:
e5:53:60:17:83:13:dd:55:76:10:30:a6:b2:8c:19:0a:17:d8:
ea:6b:12:5f:8f:a1:52:f1:cd:2f:0f:4d:b7:b5:f5:02:b1:90:
d0:40:9f:18:fa:36:59:16:0b:85:4a:72:e6:ed:58:bd:23:ec:
46:0f:4c:76:f2:ad:e9:da:35:3d:76:00:1d:36:c0:c8:3a:f2:
7b:fb:21:68:04:37:c2:0a:70:2b:38:14:20:fe:e0:86:eb:ed:
af:92:fc:76:0c:9a:d5:2e:96:70:1c:20:8c:74:4f:9a:83:75:
9b:56:a9:38:d3:77:e6:e0:0a:c0:b2:71:e8:23:43:b5:51:6e:
e9:0a:89:04:14:56:0a:d4:66:92:94:a4:4e:97:b2:1e:4d:fe:
05:52:da:43:22:11:12:3c:cd:61:a4:ce:98:12:e5:dd:15:bc:
90:17:7f:18:cb:1d:ea:3a:c6:6d:15:9a:ba:88:b8:9c:b6:94:
e1:ba:fa:90:1b:dd:03:ca:ed:fd:b4:a4:fe:cc:76:8d:13:ab:
0e:ec:9a:14:68:87:fb:0d:25:2b:76:ea:5b:c9:39:27:eb:51:
f6:b7:cd:66:9d:f3:c8:c6:e7:db:ec:cc:35:ad:80:c3:49:c5:
c1:68:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:05 2025 by rpki-client