Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
File: s7a21-XdDDKPbOr36enA0cuMHSI.mft (raw, json)
Hash identifier: hZrjf+93rwxV48cIZrkIZIMShnVoQUEbO6zKuaidW9o=
Subject key identifier: D0:80:AF:2C:D4:68:22:A1:69:92:04:24:53:C2:94:C8:41:67:19:B9
Authority key identifier: B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
Certificate issuer: /CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Certificate serial: 0194BBCE1B68266E0098F71B856694B701FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
Manifest number: 11ED
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: hzoYOWaigOBhVgvLojtyU6Dx7N4.roa (hash: T/q+Lugm+i1exm5XgQ+QByz6sPtwXurIWQU3uySV9uU=)
2: s7a21-XdDDKPbOr36enA0cuMHSI.crl (hash: EO8txWu2ecuF9t/jklMURgDWMXGZckUlFgdz5f8ay0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1b:68:26:6e:00:98:f7:1b:85:66:94:b7:01:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6b6d7e5dd0c328f6ceaf7e9e9c0d1cb8c1d22
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=d080af2cd46822a16992042453c294c8416719b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:34:a9:da:1b:7f:e7:db:e7:a5:57:6c:73:
ec:be:18:73:b9:2c:01:df:98:ca:77:e8:01:d9:36:
c6:06:fe:2c:34:ad:59:65:18:49:de:38:79:65:5b:
fc:8b:72:72:f0:92:d0:f9:24:e0:1e:db:5e:a5:1f:
55:61:6f:d7:a9:22:40:c6:2f:ee:42:c3:8b:52:28:
58:b8:3d:86:6e:6a:f2:30:86:a0:b6:fe:49:59:f8:
9b:97:42:23:e0:1c:fc:43:64:e3:cc:4d:3c:14:69:
77:aa:0f:76:16:6b:b7:02:03:d8:43:ee:23:84:0c:
7a:df:9b:57:16:d6:36:c7:49:0b:b2:d2:2c:9c:ad:
94:93:62:97:a3:73:c5:11:c8:4b:00:0c:48:28:36:
6d:82:90:8c:f4:96:d4:b3:e3:c8:ce:6e:75:38:63:
23:6f:16:a9:65:09:e4:2b:eb:4e:0b:b2:fc:d7:f1:
5f:50:e4:6e:2c:ff:c0:bb:57:97:7a:9a:15:66:3d:
55:60:c6:90:ca:63:45:83:d4:b4:64:f4:bf:09:63:
1d:d8:8f:e0:51:11:d7:29:ff:68:de:ad:e2:ce:5e:
0c:79:78:4b:55:96:7b:a1:89:42:6e:a8:19:d4:fb:
99:ab:45:4d:6d:78:ed:6b:42:97:9e:a2:86:8d:e4:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:AF:2C:D4:68:22:A1:69:92:04:24:53:C2:94:C8:41:67:19:B9
X509v3 Authority Key Identifier:
keyid:B3:B6:B6:D7:E5:DD:0C:32:8F:6C:EA:F7:E9:E9:C0:D1:CB:8C:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7a21-XdDDKPbOr36enA0cuMHSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2d7946-db8b-4a57-a70b-2071546b70f9/1/s7a21-XdDDKPbOr36enA0cuMHSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:25:61:65:98:27:52:9a:da:53:4f:10:90:79:8c:4e:32:35:
fa:62:7f:35:5f:58:09:a9:03:21:41:78:d4:97:83:0a:36:88:
98:96:30:b0:27:cb:64:65:4c:98:f1:f1:4c:f7:0c:31:09:e2:
ea:90:24:6c:88:8d:04:e1:b3:af:c0:7e:21:66:7d:75:72:89:
b8:38:e9:04:6a:d6:31:96:d9:55:96:e0:50:6e:56:8c:66:e3:
da:22:b3:dd:e2:61:74:09:ed:4d:b4:6d:86:0d:7d:f6:ec:d3:
cc:f9:b5:24:51:90:5d:e1:8f:a7:6f:42:25:0a:28:10:fd:19:
d7:a9:3e:40:da:b1:fe:a0:ae:54:74:d6:67:c9:b6:f7:ce:52:
e0:c8:e7:6e:70:db:63:9e:2b:75:51:bd:6f:08:58:50:60:56:
bc:0b:1a:8b:d6:b8:5d:8c:72:5c:c6:f7:78:40:96:8b:5a:26:
4e:62:61:c0:30:6b:4a:bd:e0:33:2f:a3:53:18:45:eb:ce:59:
39:c2:9e:12:70:19:b6:7e:05:98:59:ad:e0:62:71:b9:3c:d6:
01:8c:cd:2c:51:ef:c8:9c:72:2e:b7:ab:19:80:b8:e8:46:00:
30:48:bf:f5:d1:42:99:7e:07:b9:3c:ba:30:86:bd:b6:ee:d5:
46:c7:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:29 2025 by rpki-client