Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: 5CiiSOFV4hbHgXPNYR/ivh0t9skA+sUPPUCD24Qd39k=
Subject key identifier: BF:EB:93:65:34:51:AF:25:D6:6F:2F:FF:E3:09:EC:81:AE:D8:E8:54
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 0194BCAA2CBDF8F16DD8DA303DF4D829FC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: 0Q0w7WeC7XoIY5XUt2P6W2iOJm6vkE7uutRuklIvY00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:bd:f8:f1:6d:d8:da:30:3d:f4:d8:29:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=bfeb93653451af25d66f2fffe309ec81aed8e854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:e3:cf:44:1f:10:fa:2d:15:26:1a:f5:4b:
08:a8:5a:03:17:c6:6f:16:fa:87:7d:2b:48:3c:97:
51:7b:98:6b:d3:19:ab:10:23:27:a1:fe:86:1d:d0:
d9:2b:3e:00:33:58:ff:62:9f:62:9d:77:7d:a9:61:
f1:93:b4:3b:2c:6d:84:66:a3:76:bc:d4:4a:95:50:
3a:f3:aa:f3:ff:60:0e:4f:4d:a6:2d:1f:3d:2b:fd:
ea:ad:38:29:4a:46:07:40:c8:de:15:7c:78:3f:88:
31:8f:6c:34:24:e7:3c:da:01:8f:a3:f7:bb:67:d2:
f2:ba:6c:ff:b4:d2:f6:e4:9b:c1:51:6f:39:49:e5:
ce:ec:48:f0:c0:e1:5b:89:51:93:13:2f:34:af:b3:
15:ce:55:bb:09:2a:00:34:c5:84:2f:b2:61:5f:3c:
be:29:1e:96:b8:46:05:d4:e1:3e:55:24:11:42:c6:
9f:85:c2:c7:bf:e4:3c:28:64:00:a2:49:6a:65:0a:
68:34:07:50:20:cd:dc:11:e6:88:b8:5f:7d:82:5a:
19:a5:32:21:ba:00:ed:48:d5:ed:71:6c:5d:d4:bf:
24:9b:56:12:33:dc:7b:2b:f8:21:3d:83:1b:33:08:
52:0d:84:62:c8:bc:23:a1:f4:35:6d:aa:0e:4f:fb:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:93:65:34:51:AF:25:D6:6F:2F:FF:E3:09:EC:81:AE:D8:E8:54
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4c:5a:1c:d1:49:9d:9c:c3:f6:cf:d9:c9:e9:05:a6:ef:0c:
75:6b:b6:6b:81:03:b6:1a:81:ec:a1:7e:e8:78:96:68:31:74:
5a:a9:e2:7d:d6:91:07:17:62:ce:e0:db:c2:11:0d:60:bf:77:
30:46:e6:e7:d6:a7:d5:5c:f8:c8:f0:7c:51:b9:c9:62:e6:30:
ce:31:a4:fe:29:0e:e1:ab:f4:48:30:aa:8b:ee:22:00:8b:60:
c3:79:7f:32:c0:c4:43:c6:b5:b4:2b:51:55:58:63:15:01:a2:
5f:90:b7:08:61:8c:9d:79:db:c2:0e:c1:c2:69:a1:ef:eb:82:
8b:eb:32:2f:1e:7a:25:fc:da:14:00:42:85:c1:b0:65:c2:40:
3b:b6:2c:58:da:04:da:bd:bf:58:95:f2:af:ad:25:c5:26:6b:
2a:51:de:1c:5e:9f:50:f7:34:35:b7:2f:22:31:ed:93:95:90:
b7:6b:83:ff:03:d9:b2:b6:4d:01:30:a0:b5:6e:86:10:aa:f4:
b1:c9:da:f5:3c:8b:52:03:31:6c:3a:75:cc:cd:51:61:b9:2b:
73:54:63:93:67:a8:f8:f8:03:8a:dd:4e:15:65:24:ce:02:3b:
33:ab:38:31:e0:eb:d8:e0:24:3d:8e:4b:f9:36:bf:85:4d:42:
c4:b3:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:35:09 2025 by rpki-client