Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: W7NCFVuOzRP/lc/izwm6UKb5otL3p2QjtwdpHICFGjc=
Subject key identifier: EE:C0:44:4E:31:D9:EB:1E:37:DB:97:9A:CD:78:AC:08:DC:5A:96:61
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 0194BC72D8708C6F876740F5D5834DBCDAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: 7SlAYslbo1WukfY5TLgSPf7O1dcPxR7gU8xzhjSGy7s=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:70:8c:6f:87:67:40:f5:d5:83:4d:bc:da:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=eec0444e31d9eb1e37db979acd78ac08dc5a9661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:ac:cc:dd:91:9f:13:59:b7:8d:a6:74:44:
e0:d6:48:1b:e7:43:ca:d2:c4:fd:41:0b:5f:87:6e:
67:7f:23:45:0c:ea:c8:15:f6:f3:4d:c3:5a:ec:a9:
6a:11:1b:b5:93:eb:82:a9:b6:3f:8e:ee:2c:50:be:
44:89:b1:bb:9a:8a:96:a8:25:00:ab:42:9e:4d:23:
18:91:ba:6a:07:2a:1d:5d:f0:7d:ee:d4:ae:91:2d:
f3:bf:6a:dc:7f:be:86:c3:dd:82:36:ac:88:97:32:
6c:2b:5f:4b:02:ad:a5:30:60:b1:97:c7:00:02:91:
b2:7e:85:e5:c1:1e:d2:3b:2e:3e:0c:a9:a6:7b:a8:
fa:5c:89:fc:23:4f:86:d9:9b:dd:87:37:0d:c9:f9:
91:c8:45:1b:b3:9f:c1:50:5a:2f:5d:bb:70:64:2b:
cb:bb:9a:cd:4a:06:58:9a:1d:f5:bb:45:81:a4:75:
e2:46:ec:e6:02:c8:34:87:74:e3:e1:ea:a3:e0:4b:
9c:0c:78:a8:42:40:de:96:2f:3c:33:a5:ef:df:1c:
d8:7a:54:58:29:c9:de:1e:ee:8d:14:22:0d:50:21:
1f:fc:b1:a0:f5:0f:5a:95:cf:16:9e:6f:08:12:b3:
c8:1f:85:61:4a:e4:ce:4f:d8:f8:e2:ba:69:8d:0f:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:44:4E:31:D9:EB:1E:37:DB:97:9A:CD:78:AC:08:DC:5A:96:61
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7c:fa:c6:4c:90:6a:e2:e1:9a:12:cd:55:17:1e:38:eb:f5:
60:18:fb:53:4c:a1:c4:f9:68:d1:b9:3f:e8:6c:f8:c1:a3:87:
80:e6:95:e4:67:ac:3c:e2:0d:59:f7:27:57:28:53:07:25:73:
3e:e5:74:69:b2:61:37:f9:52:c0:82:f9:a8:60:d4:87:55:26:
62:dd:94:cb:a3:75:37:43:5b:21:a4:02:66:42:c5:7b:29:f7:
67:e3:a6:65:38:37:cc:a1:b1:41:03:a9:a1:34:4f:7b:02:f5:
4e:f1:b5:70:7b:d5:c6:9f:5b:6a:9e:86:e9:31:bf:c2:6a:15:
e6:3b:a3:de:34:66:26:9b:9a:99:cf:4a:b1:16:44:8c:53:54:
4d:2d:63:e3:49:d9:50:26:19:0c:51:4f:0e:45:50:24:2f:c8:
30:64:dc:c9:24:55:58:ac:9c:d5:81:0a:24:78:30:dd:ea:93:
0d:97:10:43:3a:69:5f:59:d1:9e:9c:3f:0c:04:ed:6f:8c:08:
d0:cd:65:24:b1:f5:4e:54:75:64:09:57:79:9e:73:3c:ab:71:
ff:fc:3a:78:74:b7:f6:75:05:ff:9c:c9:97:21:e0:72:bc:df:
e9:9d:11:ad:83:65:d3:6c:54:94:78:ce:00:c7:0d:3d:fc:08:
05:ab:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client