Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: s3fff6dlIlhcruZMs+RtB1Cs4isPjdMiHW5ouh80SNA=
Subject key identifier: 77:52:03:38:63:C1:5E:1A:10:73:DC:D5:F3:93:1A:F0:EC:11:AD:BF
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 0194BC04F9A626A53CEA43854F24277BBCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 0ECE
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=)
2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: enXJtzFGmtSSjgrEtxbKo98bnzwmj4h3YErUblYvVEE=)
3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:a6:26:a5:3c:ea:43:85:4f:24:27:7b:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=7752033863c15e1a1073dcd5f3931af0ec11adbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:db:15:a2:ef:fe:e8:5e:c4:08:7b:d7:ff:
ae:27:bb:a6:4c:57:14:5c:81:16:cc:fc:d9:fd:06:
40:07:fb:e3:a3:cb:c9:b2:d7:d5:ad:2f:d1:6f:f6:
7d:c4:3b:f0:e7:fc:3c:24:72:99:66:71:7b:45:12:
38:10:3d:8a:a8:3d:08:e3:7f:83:f3:f3:2c:97:b0:
f8:a3:0b:a0:3b:58:d6:e0:8c:99:72:61:76:20:e9:
72:db:63:ca:a9:31:82:8c:61:40:72:72:09:8b:ce:
57:da:32:84:2d:a9:3c:f0:7c:e8:0b:cc:08:23:6a:
f1:3f:af:3c:14:81:ef:6d:05:d8:15:90:a8:c8:5c:
bc:81:90:85:75:7e:ae:b1:73:69:38:b8:8f:60:e9:
1a:b5:1f:70:ef:7a:1f:54:31:f3:0a:4b:30:89:b0:
88:4c:2a:ed:1c:94:c7:b9:c0:c2:4d:fa:6e:f2:d1:
0a:1a:ef:f3:f1:65:3e:50:fa:51:1e:43:9a:0c:15:
b9:53:ac:86:13:d6:c3:42:93:3c:43:98:52:9f:61:
01:6f:69:8a:32:95:c2:b8:78:6a:44:f6:9c:3a:5e:
c0:47:b5:76:a8:70:11:89:ff:bb:e2:f7:9b:63:9c:
fb:e3:60:77:10:7d:da:89:68:f8:25:79:f5:32:ed:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:03:38:63:C1:5E:1A:10:73:DC:D5:F3:93:1A:F0:EC:11:AD:BF
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:83:e1:83:b2:ac:42:34:ba:99:fc:72:04:68:24:4b:48:17:
cb:de:01:39:a6:c9:d5:50:e2:8e:a1:c2:dc:96:c6:f1:01:10:
43:d1:cb:46:7f:ce:52:7d:b7:a9:38:66:3e:54:1b:6b:44:47:
b0:41:ae:6c:13:8b:3b:c4:04:9a:4b:26:f8:40:9f:e5:3f:1d:
29:53:70:55:15:e8:4b:ba:d1:ee:72:f5:85:9f:fc:34:9e:e4:
f2:88:5d:2a:6f:c0:34:24:76:c1:f9:2b:3a:70:64:04:80:c5:
d8:e9:6a:39:34:56:88:14:51:96:45:cc:d3:3e:a7:be:5b:39:
d5:ef:f5:5c:f4:18:32:ca:07:59:5d:d4:94:e1:26:30:46:ab:
29:bb:a0:cb:ef:87:34:22:7b:2c:d6:28:35:b8:c0:62:12:59:
a2:40:2b:2d:34:22:d0:6c:49:fc:d1:5a:f3:8d:ed:be:4f:05:
a9:88:1b:91:b8:8d:48:c2:ce:61:e4:ea:87:23:8b:ac:fd:99:
4c:0d:44:06:16:38:a8:b7:2e:ac:e0:73:2a:c3:4b:bc:e1:ea:
62:72:69:88:e3:12:60:10:6c:7e:4d:e1:b5:06:6b:fd:82:16:
23:c0:14:73:b1:13:6d:a0:7a:ed:ad:8f:73:f8:04:29:de:04:
08:56:8a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:23 2025 by rpki-client