Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
File: 68Uk1idrD_v4evfH37gmiX_seXY.mft (raw, json)
Hash identifier: FN1GwdmpnIhJ0k+AEM+cEXhur8NSM6+/6HzvQABPyLs=
Subject key identifier: 60:E4:A0:8C:B2:40:43:AE:FE:16:9B:42:A7:55:D5:63:41:08:FD:08
Authority key identifier: EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
Certificate issuer: /CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Certificate serial: 01955F5055B17D9DC905D444C112E1513FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
Manifest number: 04A8
Signing time: Tue 04 Mar 2025 04:00:55 +0000
Manifest this update: Tue 04 Mar 2025 04:00:55 +0000
Manifest next update: Wed 05 Mar 2025 04:00:55 +0000
Files and hashes: 1: 68Uk1idrD_v4evfH37gmiX_seXY.crl (hash: cBbZXe2JpyZbM0KphyjFS/ExmrD3XZ4+weR4pZ35Nyg=)
2: Bc5MZ_WIrACpPANk5bSywtmoLTs.roa (hash: UuacJmWSGdWyhAmdhk7kB4JhqQwiJFQ9axbJenAEICk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:50:55:b1:7d:9d:c9:05:d4:44:c1:12:e1:51:3f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Validity
Not Before: Mar 4 04:00:55 2025 GMT
Not After : Mar 5 04:00:55 2025 GMT
Subject: CN=60e4a08cb24043aefe169b42a755d5634108fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:18:ad:e2:77:28:36:2c:bd:33:72:c3:fd:
9b:06:50:9f:f4:08:33:8e:52:45:14:74:18:8e:28:
e4:09:0e:a0:96:5b:f1:8f:7e:6f:ba:77:fb:92:7c:
80:b2:bc:34:87:0e:b1:4e:91:f2:b1:9a:e9:3a:b2:
47:3b:5b:6d:f1:51:f1:c4:ef:77:16:ba:93:a2:5f:
61:71:38:17:5e:82:7b:21:13:b5:28:5d:7a:9e:7e:
f0:da:80:4c:d9:52:c5:b0:88:76:8f:8f:7c:ed:3c:
6c:66:7f:6d:95:31:d0:e2:cf:61:52:46:e4:c0:a7:
29:a7:d1:c3:96:51:1f:1e:ee:cb:fa:f9:f9:68:83:
6a:37:63:d3:68:90:41:37:03:40:ef:79:2e:d8:f8:
c6:e1:88:9f:43:1e:48:2d:94:2c:2e:eb:af:10:8c:
57:46:d0:a7:01:be:40:f5:e8:f3:55:65:3b:a0:49:
90:c8:61:0d:43:a2:9d:f6:7d:82:dc:62:19:72:45:
5b:3a:7f:9c:9e:40:88:8e:58:8c:1d:04:56:a7:cf:
2e:79:7d:4f:af:5b:57:94:27:a7:bc:58:4d:3d:72:
2a:fa:a0:0c:d1:66:49:8b:1f:2e:39:34:80:2d:38:
44:76:43:34:b1:e8:83:8e:b2:b0:41:43:fb:0d:92:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E4:A0:8C:B2:40:43:AE:FE:16:9B:42:A7:55:D5:63:41:08:FD:08
X509v3 Authority Key Identifier:
keyid:EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:74:40:4d:c2:36:50:b1:e0:e8:32:6e:30:73:b6:69:5a:d6:
d4:e4:91:26:4b:53:51:9d:b5:67:71:76:9d:4e:0c:bd:e6:d0:
18:16:0d:d8:96:90:28:1e:12:6c:08:ce:80:ce:90:42:15:e7:
3b:b0:c2:33:91:fa:db:a9:66:27:f1:c7:5f:3e:17:f4:09:f7:
c0:84:75:55:3d:5c:ae:86:9b:64:8f:2d:18:34:da:96:b2:4a:
30:84:8c:3e:c8:fa:de:21:07:e6:b3:93:a7:a0:e6:97:91:5d:
69:ed:23:bc:f7:81:2b:38:7d:44:15:85:88:f1:dc:a7:d2:56:
56:80:f8:47:a4:35:67:ae:2f:22:e0:c1:0f:9a:ee:f6:58:a4:
96:40:43:fa:ff:90:59:3b:62:73:c4:5c:72:72:9d:b1:5f:4a:
8e:6c:e5:4e:a5:d6:1b:6f:c8:a8:a0:50:b9:a7:83:c1:1f:c7:
db:50:e3:e5:0c:3b:16:81:0d:cc:22:a2:9d:ac:0b:b3:5d:57:
b8:11:b0:64:86:06:94:7f:3b:cd:a1:6d:55:4e:a4:78:60:2d:
5d:07:d6:3e:ca:0a:3c:cb:79:4e:a1:03:b8:a7:d9:18:1a:ef:
8c:61:64:41:91:55:ff:d1:5a:d3:55:f2:06:b1:3d:0a:9d:14:
61:be:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:30:04 2025 by rpki-client