Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: YQOTKZEQa2L6eX60dGk0vEi5sya3a5yhRPQlKQx8xXA=
Subject key identifier: 48:14:3C:87:FD:1F:DB:6A:36:38:9A:D4:32:09:98:7D:9C:84:EF:8B
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 0194BC04C8AE678DD7885B8056350CCB2CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: 9PMoioP/M9Byl0MkUylwYuySMzNsghRhZRyXMiBDSo8=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:ae:67:8d:d7:88:5b:80:56:35:0c:cb:2c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=48143c87fd1fdb6a36389ad43209987d9c84ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:72:1c:b0:64:28:de:f0:10:30:00:c7:0d:
2d:51:70:f9:03:fc:21:b5:51:ef:17:0a:2c:b3:77:
e1:82:fb:dd:fd:13:82:ab:ef:36:27:06:bc:68:e8:
53:74:7a:36:52:f1:a3:1c:41:65:e4:aa:68:16:19:
6d:5d:14:68:68:fe:64:be:b4:fa:f7:dd:d4:6b:f1:
83:53:f2:c2:bf:78:6d:b3:57:db:42:5e:37:52:bd:
62:da:77:05:da:8d:a3:2a:a6:5c:fe:1d:60:7c:e0:
19:ff:23:c2:36:19:81:8f:d2:4b:5b:52:72:d7:5c:
53:15:0c:81:5b:70:7f:3d:8f:b2:f7:8e:3c:35:b6:
27:1e:7b:89:9d:fe:8b:63:6a:c1:1b:79:c0:e8:6f:
c0:c6:b8:3c:e8:4d:f1:7f:4d:2d:27:99:99:57:22:
14:3f:43:21:bd:7b:79:5a:c4:8b:09:73:da:f9:49:
78:1f:67:66:a4:f2:cb:5e:f3:71:dc:d7:80:1d:65:
d7:6b:80:92:ce:b4:8c:57:e0:3e:81:29:48:2d:b9:
22:78:f9:f2:a4:37:14:71:bc:bf:37:74:5d:d9:2c:
72:bf:db:e1:41:05:35:a1:c4:a6:83:07:9b:e9:d8:
ab:86:d1:3a:73:ed:a8:94:19:db:6d:0c:2d:36:43:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:3C:87:FD:1F:DB:6A:36:38:9A:D4:32:09:98:7D:9C:84:EF:8B
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:cc:e9:bc:77:29:5f:2e:3c:39:78:1a:da:8c:8d:bf:a6:
c8:28:d6:44:26:e7:c2:18:09:ed:77:67:35:51:a8:3a:55:d8:
25:41:25:b2:7c:72:aa:d9:b3:00:a3:64:e6:32:06:c3:74:4a:
36:18:51:02:a8:cf:d7:3b:d7:cb:2e:24:84:2c:79:78:7e:17:
fc:c5:d7:f2:a1:97:1e:ce:29:49:fd:67:78:fb:13:1b:0c:ea:
bb:ce:89:9e:d0:98:d0:a1:1d:a6:dd:c1:51:56:5e:ec:1e:ed:
3b:7a:c2:fc:97:79:23:84:3d:52:9b:cf:47:26:9d:36:d0:d6:
8a:1f:0b:35:9d:ca:45:96:d0:a3:ed:87:91:22:39:27:92:64:
06:bb:3b:12:c2:cf:16:6a:1e:64:97:ac:d4:43:c0:d9:07:59:
38:77:06:6a:f7:cd:cf:3f:61:fd:24:5b:a6:17:0d:15:2c:bb:
7e:12:8a:be:a5:12:fe:cf:e2:64:16:69:2a:d5:67:25:82:3f:
d8:77:50:ac:07:bd:8f:08:dd:89:7f:8a:25:c6:83:66:9d:6a:
9d:2f:25:0d:11:f6:35:c0:01:a5:d7:be:73:a4:e4:87:c8:c2:
56:ac:70:f0:da:84:14:d8:f0:f1:66:26:e5:6c:03:7b:50:37:
bd:10:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:35 2025 by rpki-client