Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: vJ0OHUZfeEr8JKL6Py+mFR6lpKEr+3AGop7zA/irePE=
Subject key identifier: 93:FC:07:84:EF:4E:7F:99:C4:E7:63:83:71:CF:D4:E5:1E:B9:1B:EB
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0194BD4E687BDD65CA729CF9779C9913CAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: HmpeJp5gfiAjk8vLDJCiExt8sVbhqZtbn9h33kGx4Vs=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:7b:dd:65:ca:72:9c:f9:77:9c:99:13:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=93fc0784ef4e7f99c4e7638371cfd4e51eb91beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:43:d7:f3:85:0e:91:29:77:5c:ac:88:84:
98:27:5e:88:f3:2a:80:c1:22:93:db:07:6b:69:f8:
52:39:47:f4:2d:3b:ec:5f:e0:11:94:96:b1:04:0c:
c2:f6:19:18:18:94:01:29:5d:ce:78:9f:1f:a3:0b:
2d:d3:0c:0a:69:0a:2a:af:04:56:1e:52:15:a6:3a:
a4:b0:6a:05:2f:2c:4e:8f:cd:5e:a3:db:28:36:dc:
e3:55:0c:08:ea:b8:0e:d7:f0:ca:e6:27:bd:66:40:
ae:a7:a6:cc:b0:fa:1c:32:ac:ab:ce:4d:e1:52:43:
18:e0:d5:9a:ac:34:63:1e:7a:23:fd:26:bc:18:72:
22:83:55:6c:81:28:50:fa:8e:72:06:12:42:b2:f3:
31:c1:f8:72:a9:46:f3:fd:a1:82:79:4d:78:15:5c:
c6:73:27:48:b4:cc:bd:f2:3f:f6:6d:17:36:85:42:
8b:e5:64:4d:0d:47:28:d9:55:be:01:b4:c3:06:65:
5c:95:f4:d2:75:7c:1d:ae:6f:25:b6:ef:b6:a6:fa:
d7:77:bb:71:11:1a:61:ca:14:24:91:56:07:d2:2a:
2a:2b:ff:79:0a:33:36:5a:7a:fb:e8:1c:4d:7f:ca:
3c:e6:df:4d:03:b6:ae:09:cf:a2:d3:6e:5b:3a:e3:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:07:84:EF:4E:7F:99:C4:E7:63:83:71:CF:D4:E5:1E:B9:1B:EB
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f2:c8:ad:d8:4a:8c:93:8f:e4:f8:ca:92:d7:9c:71:8e:e2:
8d:ba:d7:91:6c:6a:27:d6:31:bf:49:8e:ce:1f:d1:c3:83:45:
cc:53:05:07:6c:a1:76:db:1a:fe:b4:97:fc:63:36:92:30:9a:
0d:3c:33:35:28:b6:c1:57:e9:37:e7:b8:c9:f4:6c:62:98:be:
aa:c9:06:91:cc:db:56:39:50:f4:f4:ab:4c:e3:71:21:df:6a:
66:6f:c6:0f:fd:a3:02:c4:e4:4e:7a:bf:6b:fe:d7:4a:e6:bb:
c4:14:b8:4c:fc:8b:f8:ad:3e:23:16:f4:a4:4b:cf:10:b8:b9:
e8:a0:8d:82:16:dd:8b:bc:7c:08:b6:e9:0b:8a:d9:68:e8:0b:
a7:34:0a:6f:7c:7a:2f:0b:ba:f1:d2:57:99:5c:77:40:09:12:
d6:34:57:15:a6:b2:c4:ad:a0:11:08:2c:1f:a9:33:4f:6a:76:
fd:9a:c1:bb:61:a0:cb:42:8b:1c:cc:1b:5f:75:dc:4d:42:70:
b7:ec:5b:f6:d8:d4:8c:5a:0b:3c:14:d0:af:ce:66:e8:85:28:
1e:cb:28:0c:eb:91:37:95:39:ef:0f:98:32:0e:6c:7d:93:b9:
e0:b1:23:8a:b3:86:ff:5c:fd:3f:ff:ca:6a:b7:e8:59:95:29:
c9:7c:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:12 2025 by rpki-client