Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: IElikXxno0CfLn4eewXw/PgxVqLDRtJpa0b9y63uLvw=
Subject key identifier: 60:4C:F9:62:76:7A:D4:7F:BB:7D:E2:BB:C0:0B:FD:7D:43:EC:69:E8
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 0194BC3C72E19AA0FEB0BD16347F1E786801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 07EF
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: D2631vXOFq1+Uw6sec/SpfyfPmtNL4sRm29fzRdiWxM=)
2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:72:e1:9a:a0:fe:b0:bd:16:34:7f:1e:78:68:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=604cf962767ad47fbb7de2bbc00bfd7d43ec69e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:e0:df:6e:41:1e:f7:14:59:d6:33:69:d6:
c4:e4:1b:df:85:3d:5a:b4:74:cf:32:85:c6:a7:1f:
65:50:89:25:c6:4d:b6:cc:08:7a:ca:6c:74:37:56:
6c:91:a1:4f:69:a9:ba:98:de:e3:5a:14:4a:66:c0:
ed:db:42:7e:63:be:b7:ae:6c:be:1a:1f:c8:a0:bb:
4d:30:34:d5:5a:0e:5e:dd:70:e6:3e:51:26:6b:6d:
dc:eb:ae:c0:c9:3d:81:7d:cf:02:2b:27:2e:8b:25:
8a:fd:6e:80:b0:a2:7d:4d:89:cb:d0:62:40:7f:a0:
de:93:95:1a:2c:29:22:d6:5a:f9:52:9b:2d:a4:d5:
1b:b0:4e:68:3b:7a:7b:ea:72:03:b9:fd:b7:89:05:
6b:f1:9a:b6:93:6f:5b:9e:f7:4e:9d:35:8b:26:81:
52:e2:b7:af:71:94:78:4e:23:8d:24:f0:03:51:d3:
4d:57:5f:43:44:9f:c3:c1:cf:cf:ea:ec:af:53:70:
e0:05:25:2d:1f:b3:c9:07:26:6c:d5:87:61:31:56:
5b:4c:46:af:df:7d:70:e7:68:48:82:f7:a1:a1:d2:
59:06:06:57:5e:ca:77:b6:8f:ef:93:4e:18:ff:41:
ab:1d:5d:95:9c:cc:fa:7c:f8:e0:f6:97:af:40:ba:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:F9:62:76:7A:D4:7F:BB:7D:E2:BB:C0:0B:FD:7D:43:EC:69:E8
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:1d:dd:7a:19:7b:bc:ca:44:94:4e:62:db:8e:bc:8e:03:a9:
97:ff:11:ef:1f:5d:13:01:a8:3e:37:3f:5e:cc:15:ec:cb:d8:
cf:3a:7e:dc:7e:77:5a:78:cc:19:cf:6f:17:e4:3c:3f:fc:0e:
36:e0:0d:03:89:2d:83:d6:21:20:92:a7:f3:7d:11:38:41:f6:
e1:76:62:5c:66:cd:2d:54:14:fa:79:bd:2b:bb:98:88:3b:f7:
0a:66:8c:c9:3a:b8:1e:6b:51:75:ad:88:2f:37:db:c5:b7:b2:
5b:c3:6b:bf:35:ca:c6:7b:98:15:2a:2c:bd:26:37:e4:68:5a:
47:73:e9:96:d9:df:63:24:99:f9:2c:b8:2a:70:1e:fd:83:da:
1c:df:7c:be:b0:cc:5f:8b:1a:a4:ba:36:39:bd:f0:ee:f7:58:
a8:c1:54:90:45:fd:7e:e6:7a:ce:13:41:34:06:14:35:03:d2:
d8:48:29:50:b6:8d:ae:42:3e:46:18:bb:4c:49:11:2f:32:14:
de:43:48:26:af:45:61:fa:65:a8:b2:0a:00:49:a8:71:37:76:
a7:55:e8:32:90:03:56:33:8b:51:f7:63:3a:de:e3:a7:0f:ae:
4e:65:4f:be:29:bb:79:44:6d:a3:b2:64:da:3f:4f:07:ff:d4:
cb:07:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:47 2025 by rpki-client