Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: TOM5WoYPJFHYb4dagJg6NVVXeppCXjvVsmyYB4QFAiE=
Subject key identifier: 5B:C4:6C:96:8C:BD:8F:DB:8B:BB:73:2E:DB:C5:EB:A7:C4:32:68:9C
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 0194BCA995EC7BD3C09EAE6FD9226BF5C842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: NdxvqCpOFyHJGwCf2UHwXkbBJ4EennCby2ym1Oja5PQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:ec:7b:d3:c0:9e:ae:6f:d9:22:6b:f5:c8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=5bc46c968cbd8fdb8bbb732edbc5eba7c432689c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:25:46:7b:83:8f:cd:3a:4a:be:f8:a6:fb:
02:34:87:a4:ee:0f:9a:e4:8b:c9:5e:0d:f9:f6:c2:
36:80:60:2a:74:64:f3:fc:5d:4f:c9:9f:75:59:7b:
da:9d:67:04:e2:e3:af:75:5c:b1:46:6c:fc:2e:33:
fc:bc:a0:3c:78:bb:0d:f3:5f:dd:24:a7:b8:fb:cb:
99:87:25:ec:16:8b:08:70:67:d9:2d:eb:d8:4f:76:
db:a3:3a:ee:a2:1b:fb:2b:cb:63:bd:ca:7c:9a:88:
01:b9:9e:64:e5:26:de:6e:09:34:3c:6f:7e:36:a0:
e5:e0:7a:d9:f6:7d:f0:dc:fe:66:fe:66:11:63:6f:
2f:f1:c6:18:50:7c:0e:b7:e7:98:41:07:1e:51:e3:
65:7a:e3:9b:fb:b9:6d:cf:e8:dd:60:b1:4f:18:e9:
c4:18:75:a7:bf:65:d3:39:f6:39:60:43:fc:f8:a6:
81:3f:10:58:a8:5e:1e:bb:b7:1c:af:ed:d7:67:75:
b7:48:97:c6:93:da:d0:49:a9:18:7a:3d:d1:8f:70:
c4:78:47:ac:5d:48:bd:df:46:5e:b9:f2:29:32:d5:
e0:e7:ed:44:f8:b5:58:b6:cd:f8:f6:b6:48:82:8a:
33:94:0f:40:26:dc:3c:f0:8f:be:62:c9:1c:c4:0b:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C4:6C:96:8C:BD:8F:DB:8B:BB:73:2E:DB:C5:EB:A7:C4:32:68:9C
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:d7:76:db:3e:af:f7:38:2e:53:3e:62:ca:59:1b:29:d3:
c5:b4:de:e0:5e:1a:5b:e5:7d:4a:e0:ed:69:18:8e:03:c0:e2:
c7:f6:a8:ed:a1:da:5e:92:ac:91:37:00:6f:f3:aa:bc:9e:90:
f3:31:59:2c:ac:7d:79:f8:c2:c0:45:cb:db:fd:ec:c6:79:b3:
9e:13:ed:61:6f:96:5f:90:f3:ff:0d:d5:79:8f:87:fd:26:9a:
82:91:69:ab:86:70:82:fd:c3:9b:6a:10:ab:29:ec:3b:ee:2f:
9e:ac:ba:33:72:2a:87:ab:56:a6:10:5b:18:3b:05:c7:12:8f:
1b:c1:7b:46:4a:29:d2:ff:4d:fa:55:51:59:99:f6:76:02:bb:
cc:eb:ba:60:3f:e5:b8:da:e1:22:27:0f:d7:2b:44:46:6d:db:
50:4f:bd:f1:72:cd:5d:02:ff:7f:69:aa:fb:ca:ef:23:32:72:
6e:ee:a5:92:36:cc:d3:d7:81:59:17:ca:41:a8:37:d4:5c:4b:
14:c9:51:c9:4d:a3:19:cd:90:76:52:bd:61:fa:3f:fd:f5:7f:
2e:94:90:6d:ec:db:d2:bd:e2:e7:7a:ce:9f:67:06:3b:2a:7a:
90:e8:08:8c:fd:f5:88:72:91:64:97:19:9f:4d:62:03:3f:8c:
a1:a0:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:31 2025 by rpki-client