Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
File: p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft (raw, json)
Hash identifier: eTN4YSveISh9dhekqvDqUCUrdsr4l72No1QtLW2w+Vc=
Subject key identifier: 9E:87:79:76:A4:06:CE:BC:0B:C3:15:E2:24:67:59:EF:7C:56:71:13
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 0194BCE084715888496FFB16F31F7500FD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (hash: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=)
2: p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl (hash: nn7OOVxDRY9K0O0xCVdiM10D0th3zjX8uQlUFAGE9VM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:84:71:58:88:49:6f:fb:16:f3:1f:75:00:fd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=9e877976a406cebc0bc315e2246759ef7c567113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:67:7e:f0:0f:e0:2c:32:64:de:69:1d:e5:
cf:0c:12:47:da:ba:62:15:ff:76:25:9c:5e:7a:97:
87:46:b7:03:e0:e6:ee:fa:36:4f:d0:84:68:c5:2c:
90:ee:f2:66:e4:ef:f7:12:8b:b5:9b:dd:d0:ea:c5:
19:e1:d4:37:68:0b:29:fa:43:bc:80:e5:7d:40:99:
42:09:e0:ff:1a:12:13:69:d3:55:a6:73:11:9d:b9:
08:ba:40:47:39:66:35:3a:dd:27:f8:bd:98:82:60:
40:ef:9a:7e:51:49:8b:93:7e:56:5f:a4:a9:58:5a:
49:a2:a5:bc:69:d0:31:01:85:67:63:e0:0b:ef:a9:
ed:e6:9a:1f:fa:22:17:c6:32:68:e8:ac:65:86:44:
2c:26:fe:b9:04:b4:0b:d2:2f:51:75:ea:43:2a:0f:
6a:ee:28:a7:e6:b6:5d:19:36:4f:ea:12:96:56:54:
52:11:c5:14:d4:c0:e4:5c:a5:ac:56:6f:54:dd:d2:
f6:f0:00:fe:2d:07:c3:2d:ad:f3:f9:96:53:0c:84:
18:85:bc:09:dc:85:e3:25:05:b0:fb:4f:44:ef:f6:
d4:14:ba:62:ff:2e:45:07:8d:9f:af:35:74:0e:e7:
40:7c:db:33:da:f2:f4:ca:2d:3a:ab:ee:d7:5b:5d:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:79:76:A4:06:CE:BC:0B:C3:15:E2:24:67:59:EF:7C:56:71:13
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:39:4c:83:74:af:c6:62:4b:46:72:d5:42:28:98:d5:65:
a6:9b:64:c6:82:9b:1d:38:e8:da:d9:ba:5a:80:1b:4b:53:99:
c6:88:57:d8:88:cd:56:02:de:df:af:57:bc:e5:1a:49:a4:06:
e9:c0:d7:87:c3:4c:8f:47:a2:2e:37:c9:7e:a7:ff:f7:2a:46:
9b:a2:96:a1:db:8c:f5:ee:fa:5f:ba:56:45:0d:e3:fc:20:fe:
ea:6b:bd:73:64:b3:9a:be:0e:af:38:9b:00:8a:94:bb:a2:ee:
69:82:d7:53:6b:63:65:8a:d5:c2:3a:67:66:82:1f:23:6b:23:
9c:64:5d:29:2c:b1:8c:b4:b3:ec:e1:d3:74:e8:75:46:57:bc:
d8:2b:ed:26:a2:a4:99:6b:f6:6c:22:1d:0c:b2:af:54:2e:9a:
f7:9d:35:f9:5d:3c:91:9f:e4:98:a1:75:f6:eb:21:7c:31:27:
7a:d9:9e:cb:fc:ef:aa:2a:a6:48:d5:db:54:72:62:98:4a:0a:
40:a1:36:5d:5d:93:a1:18:fa:b8:97:1f:db:d8:d2:e7:d4:a2:
f2:5d:48:22:28:20:70:db:d1:16:47:13:6d:dc:43:02:f3:17:
ad:13:61:44:f6:5b:a4:62:15:a5:05:58:43:f6:73:0f:8f:6c:
de:b6:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:33 2025 by rpki-client