Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier: s1HdOLhRv+BoucIH41izmoXjS952jjkZrmByY03CU/M=
Subject key identifier: 27:16:E9:FF:62:55:DC:F7:92:9F:DB:A8:F7:A6:3F:68:5A:0A:EB:06
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer: /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial: 0194BC0514029A9A75E74D6BB7E93547F9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number: 0FAB
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: DYoz2Nr2+3HnR2VLNu3UIGCqyDhR+rOuYKrZxetqUYQ=)
2: Kg5-kVb-CT-Szk4qOylrOgMLHdQ.roa (hash: 7y1Phnt9QqKkLbO9DEolnM5Y/dYlEmphmiuZ26bJCXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:02:9a:9a:75:e7:4d:6b:b7:e9:35:47:f9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=2716e9ff6255dcf7929fdba8f7a63f685a0aeb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:7f:4e:ab:b9:1a:d5:b5:95:83:45:5b:5a:
b9:65:ee:a6:5c:24:32:a1:98:80:ba:22:18:0f:2f:
34:e4:02:d0:27:4e:5d:8c:ff:20:d0:df:8b:24:f6:
42:62:58:d6:55:9f:f7:eb:5f:3b:be:96:94:b1:df:
54:92:78:d0:64:c4:81:9a:d5:7d:d4:d0:4b:0d:69:
f7:62:64:4d:d2:dc:0d:c9:7b:6a:42:f3:ae:1e:a4:
fd:c4:28:0c:d1:d4:20:68:51:53:6d:e4:60:66:15:
9d:66:24:31:b3:83:ab:b7:23:61:49:d3:67:b0:fe:
33:89:e3:f9:b4:cb:a5:01:f6:93:0f:41:97:75:7a:
3a:7d:1e:f6:2b:42:26:78:2e:af:ce:20:41:b6:9f:
63:15:1f:e3:5b:bd:f0:c3:cd:45:6d:0f:d3:36:d4:
ba:89:87:aa:e4:ac:8b:aa:de:f4:3a:33:bd:b8:66:
5f:50:46:d0:db:12:da:6e:49:4f:46:0e:41:67:37:
2b:d2:fa:a6:68:a2:18:db:5c:42:14:50:cf:2b:61:
09:76:f5:49:9c:b4:1d:36:e3:0c:4b:32:c0:b7:b6:
dd:76:96:6e:b3:27:ac:a3:d5:12:7a:68:01:d7:2f:
a8:11:76:d9:26:a4:64:8e:4f:4d:e9:86:b7:a9:50:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:16:E9:FF:62:55:DC:F7:92:9F:DB:A8:F7:A6:3F:68:5A:0A:EB:06
X509v3 Authority Key Identifier:
keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:1e:45:5d:55:91:25:5b:62:f1:ad:a8:7e:74:e6:25:39:
08:af:04:a8:d8:e2:b5:7d:92:e1:e4:fe:b6:6a:ba:aa:85:39:
e7:6c:b7:7f:ba:c9:9a:0a:ae:31:5c:24:35:a7:22:d5:4d:ff:
a8:7e:b4:97:52:11:37:ec:e2:ff:b2:b2:1f:54:76:74:dc:fe:
f4:4d:e8:7f:42:b4:93:e5:d3:f6:bb:6d:b4:29:3f:c0:83:d7:
14:64:8e:c6:11:d1:53:f6:f8:50:b4:57:b3:15:81:b3:f2:d5:
cd:ec:be:45:5b:1d:df:19:df:97:ff:dd:c0:ea:26:36:c5:9b:
35:65:0c:73:95:89:67:01:d4:af:e5:ae:1e:09:58:3e:33:28:
c1:83:84:18:84:7f:52:fa:55:f9:cd:6f:cd:3b:ac:fb:9e:ef:
64:7c:8a:13:4a:03:2a:7b:a3:fc:8f:30:59:18:1f:7f:ee:06:
5b:aa:78:21:fe:47:06:e1:6d:e2:9f:32:04:f2:42:00:95:2f:
cc:54:88:e7:18:f7:be:fb:23:c7:93:c3:66:b0:34:ab:7c:3e:
d7:54:1b:2a:f1:e8:1a:9a:6c:fd:b9:2b:d1:f8:de:1f:0b:f4:
cd:cd:82:ce:20:0e:2b:12:cc:0e:59:00:37:61:0a:55:e7:67:
92:f0:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:19 2025 by rpki-client