Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File: fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier: YaXdbj/THERXcUrq1Z61Vc/xX6B+HViMDQ+UaWtbSVo=
Subject key identifier: 73:D5:CB:9D:7F:38:88:48:C1:34:81:00:44:CA:28:A0:17:35:DD:94
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer: /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial: 0194BC72C7C885C1DCC7840AFF6FCF194ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: 6Gq0wAoiFmXIV5lKyQBlbBbL54IFDqxDvxfhKAoL1PI=)
2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c7:c8:85:c1:dc:c7:84:0a:ff:6f:cf:19:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=73d5cb9d7f388848c134810044ca28a01735dd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:e5:e8:66:11:e6:6d:66:03:fe:d4:a8:5c:
44:be:b8:19:fe:cd:e2:cc:70:6f:3e:60:2e:ad:8c:
9f:f0:71:1d:bd:78:b4:c6:70:19:fb:c5:2b:3d:53:
fe:8a:35:61:6a:8a:d5:f8:41:4c:b4:81:7e:0d:bb:
76:db:59:50:dc:c4:5d:ce:e6:b7:76:83:46:0d:35:
94:e0:eb:9e:0a:2a:77:f3:72:af:e0:30:ce:42:3b:
eb:4f:f9:86:e3:b5:fb:5f:be:0e:f4:d2:1a:38:f2:
a1:44:73:30:77:88:d5:1a:ba:27:12:b3:1c:04:f5:
f0:f3:56:6a:bb:2a:4c:2b:9a:eb:8f:48:33:5b:11:
56:8d:af:d1:de:a9:76:5d:ad:93:42:1d:dd:c9:3f:
cf:7f:34:32:e7:da:2b:f4:a0:b1:9a:dc:22:58:86:
ac:af:4a:bb:04:49:fb:1c:ef:fa:80:84:e2:6d:e7:
2c:4a:ca:85:8c:da:f1:5e:ea:7e:b9:92:78:6e:69:
f4:5c:a5:3e:33:1d:1c:42:5d:b9:1e:e9:b3:13:8e:
a3:42:88:a7:b0:09:7f:f6:19:19:33:ed:78:f7:48:
1a:bc:f6:75:e4:7e:79:6e:8f:10:1c:51:75:e6:ab:
bf:1f:30:a8:1d:15:c8:e7:41:99:be:42:01:87:cf:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:CB:9D:7F:38:88:48:C1:34:81:00:44:CA:28:A0:17:35:DD:94
X509v3 Authority Key Identifier:
keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a8:85:29:5a:69:dc:d6:ad:14:ba:07:9f:3c:02:19:2f:f4:
23:c4:81:d7:4d:ff:fa:74:7a:9f:de:42:71:97:7c:cb:80:d5:
e2:05:ee:22:af:da:fa:25:9d:a8:c6:e4:4c:4d:f4:f5:5a:aa:
37:67:73:92:7e:69:08:95:1c:6d:76:d6:d4:57:1d:50:34:3f:
04:68:5e:24:cb:d0:bd:c9:2a:7d:ba:cd:5b:b4:9a:f5:9e:26:
88:61:db:06:b1:43:57:39:ba:59:5a:7e:ab:58:27:1c:1b:7d:
3b:12:8d:cc:6a:d1:c6:ec:2c:4e:55:a2:37:27:ac:19:df:b7:
4a:c2:92:e3:42:9c:94:35:fd:17:64:c1:b8:4e:cd:c7:c1:c7:
50:9a:27:b6:c9:41:65:44:9a:47:60:44:70:72:94:87:a2:02:
a3:8b:ef:0c:a8:38:cd:44:dd:33:93:26:11:3e:8c:e4:e5:3f:
10:b3:10:28:02:94:02:26:74:73:88:38:ef:78:28:36:e0:7d:
f1:ea:dd:0f:ae:d4:f7:4b:a1:36:3d:d4:de:4b:8e:ef:68:51:
69:fd:f7:f7:e1:9d:c5:8c:01:76:25:0b:6d:74:f9:df:48:ff:
13:b1:59:03:be:cd:f2:69:5e:1d:6a:d4:80:a4:46:90:ac:7a:
0e:99:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:14 2025 by rpki-client