Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json)
Hash identifier: 4BTdb48UeNDvDcrEpA7VAvalde5pC3YI/i+H0Qx4Nd8=
Subject key identifier: 61:A5:7D:C9:1E:D9:92:E5:4E:3B:05:A6:16:66:2B:CC:B8:5F:AD:5B
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 0194BCA9F2B2D93744F43DD436F151A9AD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
Manifest number: 0F75
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: kr3FPTrUbvprQB5gOzb6Xm9In9I.roa (hash: hZOcB5l1wSRFBsah9a6wwCM7j6k84PdiP/Urp0eSJlg=)
2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: f/M1XkLDFxuJMrbm89d9AwlgJzrgLn/oKF8S0yMr+f8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:b2:d9:37:44:f4:3d:d4:36:f1:51:a9:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=61a57dc91ed992e54e3b05a616662bccb85fad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:c2:87:be:e9:ea:e7:87:80:4a:09:d8:c0:
78:34:92:e2:38:9a:39:9b:ae:f8:f6:80:7d:5b:44:
51:4b:73:d8:57:e1:07:8d:eb:d8:7e:eb:9c:98:e5:
fb:d4:47:ab:7d:26:ea:f7:71:37:78:13:7b:df:ce:
7e:28:a5:1b:50:05:f2:cc:69:d0:64:f1:f2:a7:8d:
4b:7e:f8:d9:47:52:85:5f:91:0e:a1:60:05:75:85:
b5:82:28:83:d4:0f:54:0f:c7:f3:20:fb:17:24:0e:
83:4f:6e:53:2d:cd:fd:41:b0:85:a1:be:c0:2a:0a:
fa:2a:24:7d:6b:79:17:bf:8c:bd:63:a8:02:27:1e:
15:9d:07:0e:7f:55:e8:2e:e5:ec:9a:a4:62:c3:d1:
16:7e:c0:ac:ff:9b:8f:83:ee:ff:98:6d:9b:cf:d9:
6a:4f:ab:47:57:87:4f:fa:2c:02:84:2b:2c:8e:4f:
d3:c6:62:1b:5e:79:b4:63:2f:02:d7:f2:47:96:de:
23:57:6f:f2:83:d8:18:ae:1e:8d:b1:81:4e:0f:de:
1a:43:d6:2b:0a:d5:f1:f0:c2:cf:e6:d2:cd:ce:9e:
2d:48:55:05:49:01:3d:d9:b5:c4:c1:ba:cf:0e:fb:
35:7d:67:f0:d5:16:e6:c2:42:a8:d5:f1:5b:6c:89:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:7D:C9:1E:D9:92:E5:4E:3B:05:A6:16:66:2B:CC:B8:5F:AD:5B
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6b:95:c0:38:af:35:bd:3f:41:aa:2d:8e:47:c9:7c:6b:4a:
17:7e:f7:f4:66:0b:35:62:2d:49:8e:bb:a8:33:06:03:86:f2:
16:7a:25:34:91:bf:a9:74:c6:10:1e:27:8c:a8:e6:aa:f9:57:
a2:80:77:12:98:df:c5:e0:f5:0c:de:83:e9:06:96:c3:01:be:
78:72:d0:73:3b:d9:72:7d:e2:ea:82:62:0e:53:c5:29:b5:b1:
c5:79:57:8c:8d:c3:94:41:72:72:51:8d:e2:18:72:08:97:f4:
ba:c2:9b:05:fe:aa:36:80:9f:c0:80:de:19:81:7d:b7:de:77:
cc:91:2f:58:6b:c7:9c:67:1f:6b:d9:c9:a4:94:15:c9:4d:0d:
3b:32:ef:5b:79:a7:a4:dc:97:36:ae:13:6c:e4:a7:6a:79:b4:
17:59:fb:cc:83:f1:e2:7d:ef:2d:fe:50:22:b5:a9:f8:43:a9:
ef:a8:9c:d3:03:ba:32:e0:d4:cd:51:6c:8c:e1:6b:b6:cf:5c:
51:a6:22:55:27:c6:08:5d:0e:a7:40:24:ac:65:0b:bb:ce:39:
3d:7a:49:08:a1:b9:52:9c:3d:42:94:f7:4d:d0:9b:68:79:23:
54:23:e3:87:91:4d:5b:37:45:38:b1:a6:3a:3e:39:7c:04:4b:
6b:fb:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:00 2025 by rpki-client