Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: pIoOjrMD50UPkSvak6xcV03JDWge2bNbWdSBBt8ZzcE=
Subject key identifier: 68:4D:2E:5D:4E:7F:81:58:49:6C:3D:E1:AE:03:7F:5D:D9:02:82:DD
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 0194BD8575C92E785A6C774EC59D45CE5805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0B30
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: CorW51014p1wdQl4eNXDiBTyrtgMOdxUjgGZlERl15E=)
2: iTy_X9TtImKrzgXqe4cqSrG2SNU.roa (hash: WJMhiVIQXlrVC/AnP0/l5Ke5sRxMHtV475kTEbILnQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:c9:2e:78:5a:6c:77:4e:c5:9d:45:ce:58:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=684d2e5d4e7f8158496c3de1ae037f5dd90282dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:df:62:8d:c0:08:40:a1:d6:65:54:0b:ba:
1e:08:34:9d:52:ea:70:34:0a:28:18:4b:fe:20:e4:
d6:06:5d:63:dc:c5:b8:74:8e:ab:94:61:d0:74:ce:
37:82:c7:4b:1c:43:76:f7:fd:08:73:5b:d1:58:9a:
93:cb:b5:53:8f:18:9f:37:71:97:28:35:bb:03:b3:
84:02:af:b7:ae:2b:8b:87:40:52:61:ce:6e:f8:35:
cd:2b:00:ab:f3:df:df:39:cd:36:b4:e3:92:19:90:
46:89:fe:77:0f:90:e5:49:79:f9:99:ca:44:44:a5:
e5:94:d9:ac:a2:c9:79:06:bc:ca:be:6f:2c:9f:1e:
6c:14:b2:46:d2:bd:cd:4a:13:f9:0f:bd:85:13:53:
49:3d:36:42:03:25:96:76:04:fb:65:5b:51:a3:03:
c0:69:bc:f2:53:32:c4:0b:6d:39:20:b8:11:50:ba:
c6:8d:13:4f:26:4b:cb:ca:bb:09:50:fd:c4:d5:69:
46:06:5a:94:8b:f1:23:e6:18:9a:b5:44:ea:ff:96:
3a:dd:85:b8:11:e7:31:1a:92:56:4c:8e:fa:35:dc:
63:52:61:10:72:e3:53:d4:8e:83:bf:71:ca:72:17:
72:70:9a:93:20:24:78:fc:40:0a:80:b9:6c:1d:96:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:2E:5D:4E:7F:81:58:49:6C:3D:E1:AE:03:7F:5D:D9:02:82:DD
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:2e:0e:36:0c:bf:d6:64:d8:ca:5c:01:e7:a5:4e:20:ad:
ff:17:8e:7b:2e:99:4c:b8:a2:12:79:a7:37:ca:34:21:70:43:
cf:a3:49:cb:6e:31:b8:78:51:a6:2a:91:b8:f6:8f:be:19:c6:
ad:05:98:f2:bb:03:1d:ec:a3:b0:23:f6:73:b3:56:21:28:00:
9a:68:6b:0e:33:96:95:90:e8:ff:99:6a:13:57:9a:1b:d8:eb:
91:fc:9d:e6:4a:4f:c1:31:66:c3:97:49:7d:f3:bf:08:ec:c3:
f2:f5:a7:23:6a:86:75:0e:5e:bc:02:89:59:15:ad:cf:c8:64:
65:39:97:e8:23:98:4f:20:c6:16:0f:d3:dd:a1:d5:c9:8a:4b:
21:4f:e0:9c:77:af:6b:f5:06:0a:a2:d9:7f:58:5c:2a:ab:06:
ef:8a:48:ce:57:b7:76:ac:75:94:55:38:a8:0a:d1:6a:36:4e:
e4:79:d0:37:f1:62:77:b8:5f:0a:37:06:d1:d2:7a:ed:43:b0:
1b:02:ba:81:58:c0:e4:13:3c:19:24:88:70:2b:1d:b2:9f:7d:
97:a6:72:46:1c:11:25:39:71:7d:26:68:1f:d2:ab:33:4b:b1:
9f:54:49:b1:b2:17:04:59:dd:0b:9d:f4:71:3c:c9:5e:9d:02:
40:fa:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:24 2025 by rpki-client