Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: ou8g81VDwtM8lh8ZdY5fUIIeOk4VHo2BzdDoaOx9Rzs=
Subject key identifier: 65:0C:71:10:5F:1C:85:1C:5C:80:E2:F8:68:8B:F0:7F:A2:55:C0:80
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 0194BC3C0A653595A786B44DEE3231E98A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 01F7
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: BbsZBHuMIvI/V9C4PP2siVa0xLF0RQnXKXSP5dzNv1o=)
2: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0a:65:35:95:a7:86:b4:4d:ee:32:31:e9:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=650c71105f1c851c5c80e2f8688bf07fa255c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:72:eb:40:d0:cd:65:79:78:fe:76:c5:5d:fb:
2b:97:f6:b2:6e:be:e3:5a:5d:ce:e3:99:b5:cf:a8:
07:ca:3b:ef:57:16:0e:d0:07:75:9c:98:7e:ce:66:
5e:53:d3:6e:8c:61:df:98:87:9a:c6:eb:42:de:9d:
da:67:49:74:99:0c:a6:1d:4b:b9:c4:db:0a:68:c0:
94:58:48:d0:92:a6:af:b4:89:ea:8a:9e:e7:fe:0e:
b2:94:5b:7c:91:d8:a8:33:3c:29:6d:8f:bb:7e:a8:
39:96:75:a1:4a:28:f4:35:26:93:5d:9a:f1:0f:13:
35:6a:39:c9:5f:0e:46:41:10:69:a4:0f:07:17:58:
ef:20:e0:a3:bb:2c:7f:55:02:29:72:c8:15:d0:b2:
17:9e:6e:a8:c0:d8:f2:7f:ae:a0:39:ae:ec:68:34:
24:a2:14:e5:7e:74:a9:6a:96:3f:29:23:12:7d:e3:
1b:37:5e:54:71:cd:0c:fb:2d:16:7c:d8:30:87:1a:
4e:a6:59:73:9f:90:c1:07:86:fa:ef:d4:73:81:2f:
d2:05:cb:f3:48:79:66:2a:57:6e:c5:86:3c:67:ba:
05:8b:3c:12:97:49:72:79:c3:5a:1e:1a:ea:67:64:
50:ed:18:d4:e3:45:c0:a9:bc:da:36:93:c2:dd:6b:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:71:10:5F:1C:85:1C:5C:80:E2:F8:68:8B:F0:7F:A2:55:C0:80
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dd:ac:c8:4e:6b:33:95:a3:d7:fa:17:44:68:eb:d1:40:0e:
7e:1b:72:a9:3f:23:26:d5:fc:b1:ee:8a:62:a0:99:71:c2:6d:
09:d6:ef:4a:e9:a1:20:4a:c4:e5:86:82:fc:a0:e8:d3:3f:09:
d2:e7:0e:4c:71:30:6e:53:26:dd:7a:dc:0d:59:93:21:dd:d6:
45:82:74:e6:07:fb:d9:4e:0b:c1:86:22:2a:32:da:bb:91:ed:
8a:63:b2:c7:94:21:07:4a:d7:17:be:78:be:25:d7:90:2e:9f:
54:8d:e2:bd:3c:2a:ce:ab:91:8f:c8:43:15:8f:2c:fb:f5:e0:
cb:50:7c:7e:42:14:9a:36:82:26:e7:f1:62:a7:82:cc:34:9e:
8c:82:36:66:23:28:e1:6b:23:75:3b:a7:d4:ba:9a:c1:fa:aa:
47:aa:b2:7a:3e:88:81:40:d6:07:17:61:ca:69:c0:77:72:9c:
8a:c6:5d:1e:2a:ee:ef:f4:b4:40:cc:33:89:15:7f:66:ce:ee:
db:1b:77:2c:d8:18:03:97:fb:9e:49:01:d7:4f:95:ee:e3:9e:
63:e3:1d:05:ee:e7:05:1f:61:c7:63:65:0c:3c:db:c5:fb:c8:
b3:c9:8a:00:a4:20:d4:09:9b:a1:4b:21:af:e6:cf:77:e3:d7:
e5:29:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:42 2025 by rpki-client