Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File: sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier: Y3SaYqdbSzGnmTbQeC2q87Wdb+MOxPgSh8jfavZMPdY=
Subject key identifier: 63:C3:10:DB:C0:E7:05:EE:B4:F6:FB:1D:16:B0:65:83:18:BD:91:59
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 0194BCAA1DC318335F2678767A140CA1FF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number: 0EB7
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: znmRLKG3Q4lzjRQQmMAOT3Tz+oPoWo94jXiO1vW30xw=)
5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1d:c3:18:33:5f:26:78:76:7a:14:0c:a1:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=63c310dbc0e705eeb4f6fb1d16b0658318bd9159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:7a:33:ec:28:41:d6:cd:a3:4b:27:32:f2:
5e:b4:83:2e:f4:a8:75:d9:4f:fa:f2:78:54:1d:ad:
35:a7:af:cc:8c:c4:b1:f2:32:72:19:33:c7:0d:a4:
88:df:04:a2:ee:2a:f6:82:ae:b4:8f:c9:ad:e5:c4:
9b:c8:df:04:36:e2:97:ca:7f:e0:56:9d:b6:03:62:
02:af:af:59:5a:89:17:34:e2:2c:40:18:50:a4:59:
ce:49:91:75:ed:07:b6:b5:c8:50:de:51:1c:f6:4a:
2e:dc:42:0b:19:5e:7c:a6:b1:19:ca:68:ad:16:67:
9a:7d:cc:14:e7:ce:89:10:ff:9a:27:6e:70:1c:2e:
16:b0:8d:59:d4:24:28:d3:9f:ac:9c:48:f8:40:6c:
14:6b:7c:ce:c1:c2:b2:fd:81:04:ce:0f:d3:d5:c9:
26:af:ae:19:21:b6:74:22:ec:38:75:c9:db:33:76:
e5:c4:66:9a:43:44:6c:96:ac:86:93:e5:d2:d8:5f:
54:8e:4f:ec:95:50:43:00:d0:71:42:38:33:81:d4:
30:5c:cf:de:40:68:23:9f:b7:de:ad:b6:c2:2a:d3:
cb:ba:c3:d2:a6:35:00:d7:da:22:ba:01:ae:ca:21:
58:76:08:d4:f0:7c:9b:2e:d0:88:e7:e7:d7:be:8a:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:10:DB:C0:E7:05:EE:B4:F6:FB:1D:16:B0:65:83:18:BD:91:59
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:55:1d:2d:14:87:2f:32:87:75:50:29:de:a8:30:17:36:3b:
8e:d1:78:c9:f3:80:45:19:89:0a:1e:7d:26:ce:4c:dd:c2:59:
70:58:d3:88:51:ac:9e:66:d8:80:65:84:19:89:30:04:19:10:
57:fd:17:1e:b0:5e:41:03:4c:c5:e1:2c:8f:ae:f7:6e:07:da:
f0:a9:a7:c0:00:20:c2:c2:07:7b:d6:79:e2:12:ea:4c:60:57:
b8:7a:d2:a5:61:fe:ce:ba:5f:79:cd:f0:33:f4:05:d8:0f:cb:
21:1e:82:7f:f5:81:56:00:d1:33:96:b5:8a:b4:33:8f:08:3b:
0e:31:78:d4:2f:36:25:4e:df:58:d8:1e:c9:9b:5b:bc:9e:66:
65:2c:8e:29:93:79:0a:62:77:38:71:bc:83:18:fb:95:36:1d:
ba:6b:d0:8e:d5:62:ce:6b:aa:36:56:5b:61:4f:3a:1b:be:44:
a0:09:f7:e6:c5:27:7d:f0:82:48:f7:23:a3:87:7f:88:43:5c:
c9:b8:ba:72:44:1a:97:27:71:1a:fb:e4:30:b1:09:39:b8:2a:
5d:c1:19:d4:1f:b8:92:5b:20:df:b1:17:a2:da:0a:f7:cc:30:
31:e4:0d:26:67:24:db:a0:a8:59:2c:a6:ff:6f:c2:6f:83:f9:
cd:a3:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:21 2025 by rpki-client