Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
File: U7QvfyECVOpHKsdVoWRyxS78KpI.mft (raw, json)
Hash identifier: rhJIk28vjv3J7kbInLIeNZY9nIEHGYXfyJgsN17OoXc=
Subject key identifier: 8B:77:32:CC:06:C4:38:DC:19:1B:11:C9:F4:1C:19:D9:05:E4:A8:E7
Authority key identifier: 53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
Certificate issuer: /CN=53b42f7f210254ea472ac755a16472c52efc2a92
Certificate serial: 0194BD17FA6F71DE0A954D8A660F778E2C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: U7QvfyECVOpHKsdVoWRyxS78KpI.crl (hash: TLY/GcqsnGruUQGhgI3jahbDwoNs2YSjUI8izlcXiv4=)
2: r24bse_L4kY_MIGYIsXFnBpXBhM.roa (hash: 9NX6gBMNVMar3wVhlUY4teM7U08gktRboOUltFiq9DY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:6f:71:de:0a:95:4d:8a:66:0f:77:8e:2c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b42f7f210254ea472ac755a16472c52efc2a92
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=8b7732cc06c438dc191b11c9f41c19d905e4a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:e3:8b:8f:2d:3f:f8:6b:79:52:5c:2e:3e:
ca:1b:d9:05:7a:df:a7:01:93:0b:6d:c2:fb:83:fc:
4c:21:70:3d:c7:c0:d0:7f:ae:ae:65:01:dc:aa:9f:
3b:20:dd:c9:93:9e:5d:cf:d7:15:a8:2b:fb:b8:f1:
5a:ac:3d:5a:89:0c:9e:f0:83:85:5b:e3:e8:6f:29:
56:41:46:9b:79:e6:6e:87:c6:ef:0d:e6:72:85:80:
77:6e:70:b5:2b:74:c3:bc:7f:ed:10:fb:1a:6d:c8:
0b:cf:75:d0:51:62:e8:0f:51:25:2c:75:6b:ce:f2:
68:93:0e:0f:87:4b:6a:3f:a3:32:8b:67:b5:45:7d:
ff:bc:46:ec:25:c6:c3:e3:19:40:f0:94:4f:ee:3b:
7c:9b:07:54:74:b0:4c:20:81:5c:a0:27:ca:db:07:
05:50:19:70:f6:7f:bc:00:f1:93:c4:c4:89:67:25:
61:22:29:75:61:fa:28:c9:4c:70:d0:e0:bd:cf:c2:
d6:1f:c0:7a:39:54:a0:72:7c:d4:3f:07:cb:ae:d3:
34:b6:df:81:9d:fa:19:ce:15:75:18:b3:29:87:20:
f8:72:07:66:30:02:ef:10:df:b3:2b:fa:4a:96:79:
c0:8d:4d:ea:87:07:3a:6f:48:72:8f:22:1a:5c:56:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:32:CC:06:C4:38:DC:19:1B:11:C9:F4:1C:19:D9:05:E4:A8:E7
X509v3 Authority Key Identifier:
keyid:53:B4:2F:7F:21:02:54:EA:47:2A:C7:55:A1:64:72:C5:2E:FC:2A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7QvfyECVOpHKsdVoWRyxS78KpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/1a3ffc-ec93-4724-bea3-ee601cd92c2f/1/U7QvfyECVOpHKsdVoWRyxS78KpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ad:20:7c:9d:fe:de:6d:c1:53:e0:a3:11:6a:36:64:d7:c4:
38:3f:0f:3f:16:4e:69:59:d3:87:25:53:fa:c1:1c:39:1e:ca:
a2:99:be:81:84:54:63:44:2a:85:62:db:72:bb:ac:2b:09:39:
42:be:f9:bc:a8:84:89:bd:e2:8b:d4:ae:9b:6b:f4:0f:51:29:
30:27:6f:90:9e:56:61:91:b1:63:fb:ca:4b:97:49:d0:14:96:
b0:57:a5:97:8d:c6:81:c4:c4:34:28:b5:2e:2f:65:04:27:91:
c4:da:5f:bf:6d:25:6d:3a:d2:1e:bc:a3:49:90:94:47:14:40:
3a:dc:35:00:c1:fc:15:84:a5:35:4a:94:76:87:48:54:07:cd:
4d:7b:00:7b:09:25:44:d9:68:8f:d6:a6:71:c1:87:bd:87:39:
a1:94:0f:25:53:86:cf:b9:5b:65:64:b9:08:91:c8:6c:8c:4e:
ca:2a:4e:cc:a3:68:08:dd:29:d1:a2:4b:ea:35:91:34:ed:61:
9a:03:4e:d8:a3:06:d2:6e:e8:2b:fb:d6:17:f4:2a:dd:61:d2:
9f:d0:d0:06:02:b9:70:c2:72:e7:dc:04:b7:33:71:30:33:92:
df:97:16:83:6a:43:10:30:2e:96:0c:bd:e6:1f:58:0b:e7:75:
2d:b2:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:48 2025 by rpki-client