Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: ZWJWxR14tSXLsSvVNmJpMKNcvMsm1oxyK3Bp4aESyoU=
Subject key identifier: FA:B7:6B:86:12:E3:33:EC:15:80:01:3D:23:3F:9C:D1:EF:08:5E:4F
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 0194BCA9865791B6D8EE4ABAA3AD19164730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: Rl52YOzHwzyXaQyGbsdURC0lqW+gO1TjpJ0JCJKVDy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:57:91:b6:d8:ee:4a:ba:a3:ad:19:16:47:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=fab76b8612e333ec1580013d233f9cd1ef085e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:1d:61:fa:26:3d:14:dd:a2:b9:41:54:d5:
f8:d3:3a:fa:44:f2:78:11:ac:bd:e9:d2:40:25:1a:
63:64:51:f6:8d:e3:47:79:a4:6d:eb:79:4e:e3:e4:
2c:f7:c0:37:b9:4c:d9:28:f3:28:48:b3:4e:b7:b9:
22:a8:87:95:f8:61:a6:2c:d1:2e:9f:cb:4c:5e:32:
1f:9e:70:19:58:fc:e9:fc:95:b9:20:9e:cd:de:a1:
8a:42:be:ad:b4:06:2c:63:d7:97:c0:52:d6:5f:29:
be:c7:0b:7c:22:0a:47:fd:3f:7a:51:5f:3f:1b:06:
9c:7d:a3:21:36:68:bc:09:f8:fb:a0:ef:a9:01:62:
bc:b3:87:8c:b9:9d:ea:5c:1d:ad:d0:36:39:21:eb:
78:6a:3d:b9:b2:01:13:23:ac:a9:41:a4:41:ac:c1:
89:07:29:b0:b5:d6:d4:15:ff:4d:d5:23:cc:d0:0f:
e2:1b:f4:5f:c1:99:08:f3:fa:39:fd:be:64:49:7b:
20:7e:38:04:93:69:36:80:32:58:bd:23:cd:3b:7d:
e1:90:46:2f:ae:3e:d0:e5:e8:03:1d:0e:2e:14:0d:
35:ec:d8:d7:19:53:f2:46:7d:9f:42:b2:d4:d1:7b:
38:44:f2:52:6a:92:de:44:ea:9d:dd:b9:93:05:96:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:6B:86:12:E3:33:EC:15:80:01:3D:23:3F:9C:D1:EF:08:5E:4F
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2f:3b:56:63:99:0f:ee:94:cb:13:e2:3f:6d:42:28:3f:1a:
99:41:89:95:eb:58:2b:94:ab:a4:9c:be:96:c5:67:ef:79:3f:
5e:4c:79:c2:0c:5f:56:c4:a3:9c:1c:ae:a4:9f:f1:0f:ea:91:
cb:1e:f1:46:5d:dd:4a:8b:f7:02:3b:55:6d:4b:c2:30:7d:8d:
77:79:a2:6e:18:3c:ee:be:3d:0e:e3:4f:52:d1:ef:50:91:5d:
7d:ae:12:b4:61:ef:2c:80:13:fd:57:2e:b1:5f:8a:13:cc:c1:
0c:a4:92:5b:c4:52:4f:fb:29:23:9b:2f:86:ae:40:2e:01:86:
e4:0a:6c:55:8f:e9:a4:ef:af:96:f4:89:0f:64:c9:6d:23:30:
7e:de:e1:36:22:d9:8f:e0:6f:b7:ff:11:d0:a9:46:81:75:e4:
25:10:c4:00:8c:9a:a4:a9:ec:e2:a6:db:14:ac:18:77:73:eb:
af:de:0c:cd:c4:85:64:51:85:df:6a:cc:02:ee:de:0b:b7:44:
be:bb:6c:26:28:8e:2f:7c:17:50:e0:27:fb:4f:65:5e:4c:f0:
87:a3:b5:9e:02:90:57:9c:82:2e:2c:b7:f7:fb:d4:10:fe:d3:
f5:c9:60:c1:9e:6e:42:86:a8:ba:b2:c7:1f:ba:dd:12:96:72:
7d:3a:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:05 2025 by rpki-client