Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: +eikSod4nRJX+MlCdull/R97qoVjAjplxvqFBH/1CfI=
Subject key identifier: 62:7A:0B:71:EE:B2:DE:C9:DE:09:A4:0E:8D:B1:F5:23:A4:59:39:92
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 0194BBCEEFC2DBF7C31C52DEC49D5D39AE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: 1jpnHVP15KLitQB3LfIhORHew8/l2AHyCEAczqLGUhs=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:c2:db:f7:c3:1c:52:de:c4:9d:5d:39:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=627a0b71eeb2dec9de09a40e8db1f523a4593992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:f8:fa:9e:23:72:c0:62:55:fe:88:ae:89:
a2:17:17:a9:92:5e:d6:05:f6:f9:85:56:54:c8:53:
c9:d5:3f:99:b0:c8:3d:03:fd:7b:9e:37:13:5a:33:
c6:bd:34:d1:c2:5b:fb:d4:97:bc:8d:03:e7:2c:02:
a5:9c:70:4b:2f:9a:6c:ba:58:e8:ba:00:fd:d5:3e:
36:39:cd:08:42:e4:df:a4:d5:3a:6f:cf:83:7c:b0:
1e:26:c9:c0:a0:36:5b:24:fe:0b:84:8b:63:02:a0:
a4:c4:5a:6b:b3:5e:08:99:65:b4:81:c6:16:6f:9b:
9e:d8:e7:51:a0:4a:a9:b3:51:50:d5:c2:2e:67:f6:
62:71:f4:14:77:ce:e2:ae:ee:85:aa:2c:70:05:a5:
fb:fd:ec:7a:8a:92:72:60:8c:b0:4d:99:96:97:0b:
97:f5:c7:d7:2a:27:a2:be:22:48:5f:b5:22:14:98:
de:32:67:2c:cb:83:94:d2:c3:22:dc:33:54:46:ae:
27:ac:6d:2a:eb:99:da:46:3d:b7:17:d2:1f:6d:7f:
3e:0f:8d:49:12:56:14:5e:6c:7d:24:b2:a0:53:c7:
8d:4b:27:bc:84:a9:67:18:90:c9:d0:b3:2e:33:2a:
43:b0:72:b9:b6:74:d9:8f:7d:75:56:ed:8c:f3:f6:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:0B:71:EE:B2:DE:C9:DE:09:A4:0E:8D:B1:F5:23:A4:59:39:92
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:60:5c:5c:c5:91:2b:3b:72:c6:dd:97:8a:db:d7:00:26:d0:
3c:c7:23:36:a5:a1:23:9a:4a:43:4b:9a:dd:08:01:fb:7d:1d:
a7:07:56:83:0b:7d:ad:bb:3d:43:2b:c7:49:67:06:17:35:2b:
82:03:d8:3b:b3:40:df:90:1e:03:b2:71:43:23:9e:b6:b2:7a:
bb:45:5f:b6:ae:1a:81:f4:5c:1b:4f:ef:c1:db:62:ec:19:d5:
f2:25:53:24:8d:01:07:df:9b:b8:4d:eb:f0:f7:7c:94:d3:f8:
ad:d7:3d:5f:ac:30:f9:d0:ab:58:2d:e6:7f:05:af:5a:d1:0b:
a7:c5:40:24:61:d6:62:91:71:be:01:65:0b:65:82:82:6c:1b:
fd:05:cf:da:86:fa:6b:d4:7a:e5:c5:0b:da:84:f8:e1:2a:8f:
9e:a0:1f:fa:aa:68:d9:bc:80:d5:e3:6d:10:b2:1e:88:4e:3e:
84:cd:ae:5e:7a:51:61:23:41:fa:3d:29:71:52:78:6f:c7:04:
a0:ce:e6:03:e7:44:75:a4:f3:0d:df:a5:e9:22:6c:86:09:e4:
74:a8:34:6f:61:37:64:e3:c1:3a:ac:98:25:a6:3b:60:4c:8a:
98:c5:bb:92:dc:55:5c:b1:fd:a9:38:e3:af:1e:fb:53:7f:0e:
b9:2b:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:50 2025 by rpki-client