Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
File: Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft (raw, json)
Hash identifier: CGMcVbZgrCWKxY/A5rzjgMjp+4Q0TKF1udVhSKHluGU=
Subject key identifier: 4D:A1:62:FE:70:30:5D:21:6E:EF:3E:32:62:F0:A1:33:71:2B:51:86
Authority key identifier: 46:8E:CB:A1:0E:75:99:A0:30:AA:61:30:88:68:8A:6C:26:D6:2D:75
Certificate issuer: /CN=468ecba10e7599a030aa613088688a6c26d62d75
Certificate serial: 0194BD177CE7826E2D3FB96C5EDAB317B819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl (hash: fI4HxdVmTkGu0AjOSiTo1JtJnw1tut8YMPUicIHxxmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:e7:82:6e:2d:3f:b9:6c:5e:da:b3:17:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468ecba10e7599a030aa613088688a6c26d62d75
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=4da162fe70305d216eef3e3262f0a133712b5186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:6e:d7:51:15:ef:06:37:f0:74:15:65:19:
df:f4:9c:95:53:a0:13:59:82:6b:38:06:77:f3:c9:
45:2b:c7:f5:5a:eb:6b:18:ad:85:ab:2a:ef:a8:ac:
b8:5e:96:7f:fc:6c:7e:6d:12:8e:04:f9:3f:23:3c:
ef:1e:07:25:4e:9b:ca:18:7b:67:0b:92:31:de:95:
cd:ad:c5:a8:7e:c2:30:45:83:b1:b7:4d:2d:2c:f9:
96:c8:a4:df:f2:eb:f0:1f:34:fe:9c:de:ff:3c:ad:
ca:22:42:73:e7:be:7c:22:74:40:f0:63:4a:e5:57:
6e:62:1d:ea:ee:93:30:69:c8:d8:f1:69:a0:06:b7:
aa:5d:fd:f8:d6:50:89:46:f8:47:8a:9f:d1:f1:a1:
c9:21:ad:d8:4f:31:b4:86:7d:33:30:27:a4:b5:df:
c8:61:c9:3b:fd:70:60:6b:8b:99:50:a7:c5:10:c2:
77:35:61:68:e2:17:67:72:b8:96:86:fc:ff:ca:f4:
3b:23:ff:a7:35:00:88:19:64:21:62:32:42:d7:08:
d6:be:3e:02:80:29:7d:e8:4f:ab:b6:7c:78:64:ff:
57:77:4c:7a:00:61:e5:de:3d:41:18:aa:52:96:80:
19:d0:bc:33:2e:20:d0:f2:e4:de:e9:72:24:2d:05:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A1:62:FE:70:30:5D:21:6E:EF:3E:32:62:F0:A1:33:71:2B:51:86
X509v3 Authority Key Identifier:
keyid:46:8E:CB:A1:0E:75:99:A0:30:AA:61:30:88:68:8A:6C:26:D6:2D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e9:c3:83:f8:ba:54:68:20:46:5a:13:46:43:c5:d0:f2:22:
32:eb:1c:ca:a3:c5:e0:62:f7:af:9d:d8:1a:9b:ba:ad:f7:cd:
a4:47:61:e8:98:e6:4d:1d:65:27:6b:c6:ff:64:df:69:70:14:
82:1f:dd:de:46:1d:62:ab:c7:3b:0f:43:11:09:73:ff:80:fe:
6e:68:53:a1:93:66:fb:a9:72:f7:b8:18:43:28:97:3e:3c:6a:
9b:52:67:7e:15:f1:6e:ac:9c:d6:7b:a7:c9:98:62:5f:0e:82:
0f:53:ce:77:a5:3d:bd:85:82:72:d4:88:53:03:df:84:25:7f:
cd:87:1b:a7:42:94:b2:26:b2:88:08:45:83:2b:55:d2:fa:79:
9f:fd:93:7f:b6:88:cb:fd:38:99:72:af:77:ee:d8:71:03:0c:
89:46:00:ad:7f:78:0c:f6:3c:db:6e:7f:3f:77:d9:0a:11:b5:
c4:60:c3:89:58:b5:ab:55:64:5b:17:95:e4:44:34:b3:6c:b5:
31:c4:8f:da:f6:72:3e:11:d2:d6:1a:a1:c2:8e:fd:3c:94:dd:
92:1f:35:ef:dd:e6:a6:c5:63:0e:15:cb:90:34:d9:ef:4f:6e:
07:7b:20:5b:17:11:4d:29:32:ba:07:82:ab:00:e4:61:84:bb:
c2:ae:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:53 2025 by rpki-client