Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: uCrAHZ+DQaTN4GtId7LLzXbGI9DmOq3eVId/J1yoXa0=
Subject key identifier: E0:E6:AF:95:2B:48:33:2A:8C:9C:C0:E9:42:16:14:B7:C7:C7:45:9B
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 0194BBCDECA17BDCFD57BB904E2106B528BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 0EE8
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: 0CceuujOUN7fI6SJWiU4I3JvZeo.roa (hash: ReNIag9nA9bjr82rfcj5JjzPGdjpj3RK7GRwiAamY6Q=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: iAgj5PnHrSb6l0+dcHEHpela2JBD6LrB9l7U5QFudIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ec:a1:7b:dc:fd:57:bb:90:4e:21:06:b5:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=e0e6af952b48332a8c9cc0e9421614b7c7c7459b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:3b:b4:3b:20:f4:a5:07:ab:c8:9f:7f:15:
91:a9:ff:1f:b9:1a:e3:d1:2c:5e:26:f4:8c:d4:12:
b2:ca:32:68:5c:de:2b:33:e8:45:d3:53:12:d4:10:
2d:2b:e4:6a:89:6f:c4:c7:c2:bf:d7:8a:ea:cf:83:
58:4a:7e:9d:52:fa:c1:10:9b:fc:53:81:65:af:06:
31:8e:03:fe:3c:ba:98:71:81:2d:14:70:c7:bf:cc:
51:0b:3b:6b:38:dd:ce:c8:49:22:af:17:13:6b:72:
4c:97:f4:6c:02:2f:c9:91:3b:71:3e:df:75:da:be:
48:63:8c:4d:29:60:a9:5c:e7:c3:e3:b5:0b:8b:99:
54:6d:d5:f5:2d:b3:a3:47:1c:17:49:f8:76:ca:21:
fd:4c:ee:c0:ab:ad:0c:e2:58:0d:4d:f5:d7:63:d4:
92:2a:ec:2c:ba:2a:86:0a:3e:5b:4b:38:4c:81:ea:
80:d1:49:8e:f6:f1:23:be:a5:6b:c6:d1:d0:f1:9e:
6a:e5:97:3e:00:95:d0:37:20:79:41:89:9e:ee:82:
10:94:61:00:73:c7:56:88:8e:63:33:d4:ec:d2:8d:
fa:97:0a:ca:e4:9c:ea:df:75:3a:4c:49:c8:c0:26:
10:80:1f:78:98:7a:56:00:46:46:79:96:c6:9f:6b:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:AF:95:2B:48:33:2A:8C:9C:C0:E9:42:16:14:B7:C7:C7:45:9B
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a7:85:35:37:b2:aa:43:94:ef:6e:59:d9:52:09:b7:1a:7f:
3d:15:9c:24:10:01:89:de:af:86:4c:79:27:9c:83:c8:c2:d9:
1a:97:a1:61:4e:03:20:db:79:e1:d2:c2:25:ae:59:92:ca:88:
de:17:80:16:17:da:de:4d:43:f6:2e:5e:59:07:d5:ec:cf:35:
67:88:58:89:85:06:8d:13:7a:94:e0:20:f8:24:0f:77:49:08:
cd:e9:b7:1c:a8:2c:5d:f2:6b:ee:52:2c:b9:ed:6b:26:53:6e:
c9:1e:58:14:38:82:fb:bd:f3:08:56:9d:c0:50:43:55:ea:d2:
27:a6:b5:73:46:32:57:23:b2:cf:f8:7a:ff:1e:76:d7:73:76:
e6:50:17:d7:82:d9:1c:e7:63:76:c3:be:11:a6:78:a8:db:7f:
ea:b4:e0:5c:fe:02:a5:89:64:ac:20:f4:1b:f6:81:75:96:23:
96:08:b7:73:34:25:d8:58:0b:5f:15:f8:63:3f:15:44:c9:7a:
4a:7d:d0:b3:3c:bb:ca:fd:cc:16:0c:db:f6:23:7b:da:eb:52:
24:8f:a1:f0:f8:c6:52:7f:82:71:1d:cf:c5:17:57:da:a6:2d:
13:20:05:c0:7d:c9:d8:9c:94:dc:15:5c:24:24:16:c7:c1:cb:
4b:f9:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:52 2025 by rpki-client