Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: MDgQCVNI3rr1kXrL9rIWM/Ny5nWvBzLpcB8F0UuzIyI=
Subject key identifier: 9E:E6:5B:76:E0:9B:1E:3F:CE:DC:56:60:64:50:16:D0:A8:CD:AE:4F
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0194BC3BE18E19214CA58AF792A4C3BEE99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0AD0
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: lT9tc6bzqOvJxcbfsm/tOVDf0EKPDdGZp2D29xzsNbk=)
2: wcZjktD-ylafAYUQZwppn2FKmAo.roa (hash: 6FO9tRnnTKaMi5T8L6VAMjnhKIgt7OcDLSl6CIBc5kI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:8e:19:21:4c:a5:8a:f7:92:a4:c3:be:e9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=9ee65b76e09b1e3fcedc5660645016d0a8cdae4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:09:b7:1e:ed:f3:8e:d8:9c:81:4b:4e:9b:
99:6c:c8:f5:95:ba:5a:76:76:b2:77:75:28:b5:c4:
1f:ce:a6:97:2a:22:3b:e8:65:26:b7:a1:0d:36:47:
aa:b0:cf:62:4d:b9:68:45:8d:a5:60:82:d9:5c:aa:
e7:71:b2:37:69:02:a6:40:39:76:fa:52:43:24:7a:
83:7f:ef:7d:91:2e:3c:48:20:0c:26:19:b8:00:e6:
99:b4:e4:c1:7b:94:1c:d6:a5:45:de:f6:78:76:9a:
f4:c4:a6:2b:2e:02:2c:52:5f:0c:46:bc:1b:7d:83:
5a:60:a7:30:bb:e1:59:0b:2b:59:3d:ce:98:eb:bd:
a8:b2:1d:e3:ec:9a:81:e9:0b:e2:5c:16:08:a3:66:
f6:99:fa:18:47:97:5f:de:88:42:c4:07:ef:50:60:
81:0c:1a:72:84:76:a9:3a:01:c6:1d:26:ee:de:e4:
e7:aa:f5:43:8d:06:08:03:13:76:b9:d8:ce:e4:ee:
f0:76:a2:15:7f:48:47:4a:ba:7a:f0:85:3c:d4:97:
b2:f7:be:e6:ba:b1:b4:ea:25:5a:84:8d:2c:9b:df:
b3:56:ee:0e:bb:62:dc:10:46:31:1f:36:ef:d7:b3:
5c:58:bf:f7:84:02:6b:4e:d6:c2:6d:f0:07:72:79:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:5B:76:E0:9B:1E:3F:CE:DC:56:60:64:50:16:D0:A8:CD:AE:4F
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2d:4e:62:ad:75:b0:df:1a:5f:fc:15:94:28:6d:e8:e5:39:
18:ad:2f:16:06:54:1e:41:5a:1e:30:8c:1c:d8:40:1f:08:e0:
f2:c3:ce:87:2c:89:cb:33:48:46:f2:07:25:5e:23:7d:bc:3b:
b3:8e:c0:36:25:b8:ac:13:9b:42:27:c8:32:cf:04:cd:11:9e:
71:2f:58:24:fa:b2:d8:ab:60:ad:fd:2f:2a:c2:0d:6d:a0:7d:
8a:11:9b:5d:05:24:48:0c:08:61:ce:0a:6e:a9:7f:67:e3:4b:
b8:69:66:ba:3a:ed:9b:3e:09:62:48:b5:45:00:97:ac:92:5c:
d5:1b:b2:cc:d7:3f:f0:2f:a4:46:9c:0f:71:94:e8:f4:1a:56:
d7:f8:8d:1e:af:c9:3e:52:ad:01:3b:52:c4:82:9a:cd:3e:71:
a0:20:67:b5:06:34:41:84:8d:c9:db:4d:fe:65:19:70:2a:f1:
5b:96:2b:91:76:47:a9:f5:f3:0b:9a:1f:ce:b4:05:2f:0c:3f:
8a:ea:91:af:8f:80:fd:94:8b:21:c1:c1:23:a2:fb:ca:40:10:
1c:c6:dd:93:18:7e:7e:58:96:cb:a6:24:28:c1:cd:08:df:27:
6d:80:a4:d5:7f:d2:56:e0:e0:0c:9c:43:41:e3:b7:aa:08:c0:
d0:a8:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:40 2025 by rpki-client