Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: uQRzYZalWi5M7hmzudo2tfpPR3gLWlmU0F8fZtH+mGo=
Subject key identifier: 60:43:6E:FE:3B:C9:D4:B5:2E:23:5B:04:1C:7E:2C:C2:4A:36:16:47
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 0194BC73338DB84D39617D9E4463CAEA9496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0985
Signing time: Fri 31 Jan 2025 13:00:53 +0000
Manifest this update: Fri 31 Jan 2025 13:00:53 +0000
Manifest next update: Sat 01 Feb 2025 13:00:53 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: 3+d45IheV8U8ARQsWM0bLZHgFRlKyXWYMSFo53Vrr10=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:33:8d:b8:4d:39:61:7d:9e:44:63:ca:ea:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jan 31 13:00:53 2025 GMT
Not After : Feb 1 13:00:53 2025 GMT
Subject: CN=60436efe3bc9d4b52e235b041c7e2cc24a361647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:0d:0d:a2:2f:10:8f:ba:44:81:fe:4d:b6:
27:ac:81:fc:d4:df:e2:c0:73:79:c1:59:ff:33:24:
ca:3e:10:32:25:ee:90:5f:d6:61:93:81:60:8d:da:
ea:5b:37:c1:d7:a2:cb:62:d8:2d:3c:9d:98:54:f1:
56:13:a2:54:9b:a2:bb:3d:e7:58:15:7b:80:f1:7a:
c5:19:34:b8:97:e0:f2:e4:02:3b:5a:66:dc:4f:65:
79:fb:07:06:28:ba:65:b3:bc:aa:61:1d:28:27:30:
c5:e9:2c:ff:9c:b1:7e:7c:bc:3a:2d:87:65:50:ed:
c8:46:74:cf:b4:68:d6:17:a3:f6:b2:2e:50:23:96:
59:cb:fe:bc:d1:25:31:f7:8c:8f:8a:18:8b:0c:27:
2e:3d:b2:c2:8e:27:61:04:0e:1e:7d:9f:8f:04:cb:
56:7e:26:26:33:a7:a1:46:8d:9b:95:27:f0:9b:b5:
de:88:c4:3b:64:5e:76:cb:c5:e8:98:6a:ea:ff:e7:
c1:8d:eb:06:bf:ac:6f:9f:7a:1a:30:03:02:af:1a:
7a:fd:a3:47:99:5e:08:76:84:03:a2:a5:8a:43:c0:
4c:17:8d:c3:61:c5:1b:f5:48:bf:9b:2c:39:a6:d4:
df:67:ea:8f:df:45:d3:04:28:01:1a:47:ef:86:8b:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:6E:FE:3B:C9:D4:B5:2E:23:5B:04:1C:7E:2C:C2:4A:36:16:47
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:88:6f:b9:7e:dd:28:3f:f3:0f:59:54:37:65:ed:ba:2b:9f:
73:a8:80:ac:ec:51:3e:ee:2b:16:ff:03:66:1c:30:dc:6a:bf:
0d:e9:44:2e:96:77:bb:fd:9a:dd:53:b9:1d:07:f3:85:07:e0:
69:f6:a6:86:50:66:6d:2f:18:e4:c0:66:91:26:df:a0:33:cc:
e8:40:71:37:77:1c:b5:10:18:d3:80:aa:38:fb:3d:85:f8:c1:
d1:96:22:cc:e7:19:db:df:ef:f5:b7:e6:d5:72:c3:f5:9c:d6:
0e:3d:43:03:2b:b8:e7:6e:f4:88:ed:40:20:b4:86:a4:ff:ee:
09:d2:6f:09:27:88:e0:d1:76:87:08:40:23:ca:9c:a1:ea:e2:
e2:ac:72:6b:96:6d:7a:64:01:dd:8c:f2:20:18:03:db:11:90:
27:7b:cc:18:e8:80:bb:97:d5:9f:cd:41:cc:c4:f0:7b:8b:f0:
17:8c:5e:e7:71:0c:cd:32:bd:b7:62:1c:5a:f0:3d:dc:6c:b8:
65:fe:b9:e2:3a:18:f1:ca:30:1c:04:df:17:e1:27:2c:5d:d4:
af:07:c9:93:03:9b:53:b2:87:c2:7b:81:07:d3:ff:24:1f:15:
98:80:49:29:d7:1e:e5:bb:bf:b4:25:bc:5e:22:40:d8:65:b8:
90:34:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:52 2025 by rpki-client