Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: 4Ej2yhAM5RsEuOxXRKUo/3MP2FfEBYaSPIh38DwonJQ=
Subject key identifier: D6:FB:EA:94:EB:6A:54:A0:AC:4B:7B:F7:B4:FA:20:A8:B8:72:48:B8
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 0194BC050A6DA2113B00035D8AC7F3D2AB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0AAE
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: Zm83rTcFmLJka2XgGCUFeXEPbRhxHyGc9oMdT9WeA5U=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:6d:a2:11:3b:00:03:5d:8a:c7:f3:d2:ab:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=d6fbea94eb6a54a0ac4b7bf7b4fa20a8b87248b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:18:2b:ea:29:da:a3:f0:1d:6a:75:bb:8f:
f9:b1:28:77:5f:56:2f:86:68:f3:92:5b:3f:44:67:
da:9d:b1:4d:e0:ef:34:fe:0f:6e:e6:1d:01:5a:7f:
d7:aa:e8:5f:23:ca:c5:c3:55:a5:a0:1c:e0:64:1b:
16:43:d8:0e:e7:0f:8f:03:8a:16:48:62:56:aa:b9:
c1:96:38:3d:50:89:38:b4:28:5e:8d:4f:3a:02:f4:
0b:af:b3:7e:32:a2:01:9e:b2:52:f6:0d:2c:94:43:
ef:a8:48:eb:c4:6d:5e:79:a0:0e:ee:e4:48:da:2f:
e3:e0:16:a4:34:0c:a2:4e:33:97:45:9b:db:48:8b:
a9:82:dd:67:1b:49:6b:1b:b9:bf:22:1c:13:f8:e9:
1c:a8:c1:e3:28:52:e4:e3:aa:fe:5a:e0:24:08:20:
2a:9f:4b:33:86:5a:45:15:7a:fe:be:6a:06:d8:03:
89:01:5c:09:e3:ed:de:82:32:35:ad:d2:0d:68:9d:
39:d3:b2:05:36:27:77:9a:b0:e6:17:7c:23:96:f8:
95:07:db:4f:d2:57:b0:77:4f:3e:18:31:0a:05:af:
57:cb:a3:3e:83:d9:98:c0:8c:85:e9:ff:ad:75:7e:
23:20:d7:54:43:41:ae:97:08:5d:c1:bc:bd:37:50:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:EA:94:EB:6A:54:A0:AC:4B:7B:F7:B4:FA:20:A8:B8:72:48:B8
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f4:9c:35:3b:3d:17:b5:83:22:b0:5a:f4:b2:2f:d7:4b:77:
31:4a:e2:65:b8:44:b3:11:02:84:31:5e:67:fd:69:d4:e4:70:
2e:6c:1f:c9:9c:b4:81:bd:78:68:f0:74:34:21:80:30:2e:f8:
bc:65:15:28:72:ee:fc:d1:6b:11:65:72:45:7f:73:80:5a:db:
87:a6:e2:6f:dd:7a:f9:7d:99:f4:45:f6:95:29:fc:08:66:9d:
95:c4:e4:9f:d1:29:9b:f8:0c:e1:27:04:84:9e:7a:21:d3:9e:
8c:0b:a3:59:6d:4e:8a:27:c4:bf:aa:b4:1c:f0:8d:c3:e9:11:
fe:df:7b:b8:bd:4f:e7:67:c8:13:57:9a:5d:82:6f:44:2b:13:
62:f4:81:6d:27:83:4a:5c:cd:32:bf:34:28:b3:eb:34:a8:2e:
9a:c2:20:ef:7b:88:3b:c3:83:70:a4:97:66:e7:60:52:33:be:
91:71:e4:5f:8c:3b:3b:ba:47:55:24:b2:29:05:47:fc:bb:1a:
33:c6:6e:41:2e:90:5e:8b:a4:fe:e4:79:f4:a2:12:ad:89:13:
86:6a:3d:db:07:4b:53:cc:ca:69:bd:ed:78:47:22:6a:4f:c2:
12:34:af:3e:7c:f1:3b:3f:3e:fe:44:1e:46:6d:7c:51:a6:f5:
4d:27:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:04 2025 by rpki-client