Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: Thi3eyI2OJcr06fcJI+SrHQrE/m+3cdita3KHYXyVCw=
Subject key identifier: 67:44:7A:09:EB:70:F9:E0:08:AE:BE:12:67:EF:7F:8D:E4:6C:D0:4D
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 0194BC3C6599EABD1801504223738E4F6FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 0E8C
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: 0NklwArD2Xy2hlvQ4HURCA9re2nkprYH/DwBXcskw+E=)
2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:65:99:ea:bd:18:01:50:42:23:73:8e:4f:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=67447a09eb70f9e008aebe1267ef7f8de46cd04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:34:d7:c3:13:08:f6:ad:77:37:11:fc:e8:
63:3b:fe:1d:86:a5:1c:bb:35:fb:b4:be:b5:4f:78:
b7:3e:92:5f:0d:38:3c:95:01:d7:ff:ef:a8:0c:85:
96:59:02:37:6b:5b:c6:69:19:b7:40:de:15:be:31:
9f:67:06:13:e7:6e:eb:78:71:a4:7f:fc:ee:7b:91:
80:13:ad:2c:1f:d8:dd:9e:f9:5c:07:79:e7:39:b3:
fc:33:94:41:64:30:f4:e7:7c:ec:54:3a:69:8d:14:
ff:59:f4:04:73:63:d5:fc:9a:53:16:bf:c0:16:66:
db:b4:a6:e4:62:a6:0b:3c:7c:ef:54:ce:3a:fc:da:
de:c1:6e:c5:8a:5f:46:54:3f:a4:46:b5:fe:70:04:
7f:38:3c:54:00:e2:22:71:d7:d0:66:4d:75:e9:cc:
33:53:69:3e:2c:79:dd:46:e0:53:18:cc:eb:aa:96:
58:08:f8:ac:67:bd:2c:e2:59:a5:e0:63:bb:61:6b:
9f:d9:11:a1:83:f6:7c:f3:5a:e3:7e:e8:57:64:60:
79:2e:49:b1:d5:f6:a9:11:d3:aa:c4:dd:c9:bf:77:
81:3e:c7:57:2b:ed:18:90:8f:be:dd:c2:d7:c3:90:
f9:6d:9e:cc:71:56:57:2d:e7:e7:3b:66:b7:7a:8f:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:7A:09:EB:70:F9:E0:08:AE:BE:12:67:EF:7F:8D:E4:6C:D0:4D
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:28:93:d8:f7:e6:87:a0:d8:78:3a:31:4b:47:cc:e8:01:3a:
cd:2c:e2:a8:5a:ca:54:3b:ff:bc:b4:a7:5e:70:ea:d5:3d:10:
7b:b8:ea:bf:44:9b:02:50:59:db:66:c0:a7:4e:7b:a3:1f:6f:
c2:d6:21:43:1a:d6:f4:5f:ae:bf:40:61:b2:7b:1c:12:16:24:
2a:1a:99:a9:c7:fc:8d:b9:17:19:2a:fa:f7:3f:b1:cf:e1:9f:
37:0e:e6:e1:2f:28:18:35:9c:4e:1d:29:c9:c1:0b:b2:50:fe:
b8:8b:d8:8c:2d:c2:8f:1d:ce:ec:a0:61:04:6e:a7:35:2b:25:
f6:bf:7b:df:e7:95:b0:37:7d:bd:d2:09:6d:3f:cd:89:ee:42:
f9:5c:1c:5f:8e:7f:5a:79:06:e0:1f:5d:6d:0b:62:dd:9e:a2:
f6:5f:23:15:15:dc:3a:ed:d5:60:b5:ac:51:ce:1c:74:99:79:
88:17:2d:02:46:42:e7:ff:4e:5c:1c:ef:f7:8a:59:38:0f:0d:
fc:4b:cf:48:ec:b8:0b:51:73:95:b9:f6:c6:bb:81:33:5e:10:
b1:9e:7f:da:79:4f:16:64:4a:08:fe:b3:7b:74:80:59:c9:d9:
e4:73:09:82:91:e3:bb:d6:99:1a:e7:b7:af:9b:4f:88:65:5e:
a8:38:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:03 2025 by rpki-client