Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier: RtBmVY0oExuJxZgBdksiz8/RwQYpR4/5PzW43M76L4g=
Subject key identifier: 2B:59:A4:61:E5:A5:6D:A6:2D:67:F1:37:A5:F9:13:A1:E5:00:40:5A
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 0194BC3C1E714F2E999571451EC9CB8328F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number: 1078
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (hash: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=)
2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: yW4N8grXhmiwOpsc1JIGiSMmWtkW+l24N6/uyUQ6BVA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:71:4f:2e:99:95:71:45:1e:c9:cb:83:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=2b59a461e5a56da62d67f137a5f913a1e500405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:a8:88:4f:62:20:60:d0:fc:0e:a4:a6:63:
95:2d:e0:0c:51:55:47:69:e2:27:1f:0f:ee:58:89:
7f:d4:af:ff:7f:08:b4:ab:df:b8:35:cd:9b:d9:53:
64:81:49:be:bc:75:97:74:2a:1f:41:59:96:28:ec:
b1:a0:a6:70:b0:e5:30:6a:ef:a5:54:9b:aa:20:5b:
aa:41:b8:e4:a6:1a:5d:78:9a:07:6c:14:de:53:70:
7a:59:90:12:6d:4f:59:65:fa:af:d5:9b:97:74:3b:
72:99:e2:f5:5e:e2:fd:f3:75:ca:b1:29:33:d1:f7:
6b:5f:59:ff:83:cd:7c:d4:b0:48:6c:2d:d1:c5:55:
91:0d:2e:40:12:ae:b8:25:fb:e0:30:0f:91:69:3a:
ef:57:cb:25:95:c9:5c:6a:de:dc:1b:af:12:5f:e2:
40:74:c3:da:3f:c8:9f:06:ac:a5:75:73:51:80:d9:
62:68:41:5b:76:39:37:6c:5a:67:f2:56:15:23:bf:
c8:a6:eb:46:ca:b7:36:40:4c:8f:36:fd:12:06:af:
be:bc:83:6e:ca:88:62:a6:f6:0c:e2:ff:57:87:66:
a7:db:42:75:73:6f:8e:57:ef:d1:23:06:da:2f:ff:
1a:bb:d7:75:c2:ce:ba:d9:ef:b6:3b:84:76:6e:35:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:59:A4:61:E5:A5:6D:A6:2D:67:F1:37:A5:F9:13:A1:E5:00:40:5A
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d0:1e:39:75:fb:8b:69:fb:84:6b:2f:f2:eb:af:0b:dd:dc:
4c:27:6a:e6:f3:e0:f2:8b:90:ef:c3:d9:b2:63:d8:a6:d3:8d:
d9:2a:44:6f:84:1a:6b:e0:68:f1:fd:b8:b2:a6:33:0c:f3:f7:
60:2e:dd:af:53:ed:90:3f:c9:c3:3b:ab:d8:aa:88:e9:e0:69:
ad:6a:3a:be:4d:4c:6f:ee:7d:cc:1a:4f:5c:66:cf:13:54:59:
85:f7:d1:c9:cb:56:6a:91:5b:54:e4:cc:b5:2d:97:a0:e1:99:
c1:ac:e7:88:8c:27:a0:05:78:88:14:08:1d:80:fb:b2:5b:e3:
67:bc:1d:33:b9:86:f4:db:6b:c3:8c:86:f6:be:91:b8:3c:8f:
e7:97:dd:30:6f:d4:d1:18:78:1c:4e:f1:ff:e2:64:15:c0:e6:
87:21:fc:21:1d:1a:1e:c2:b3:2c:a8:b3:4d:39:5c:5d:d6:6e:
77:1b:94:db:12:52:2c:ea:1c:ef:18:2a:58:b0:03:ea:9b:34:
3c:6e:da:67:50:db:5a:8a:d7:8c:4c:16:6e:63:27:33:4b:c7:
94:c9:c6:b6:88:04:aa:14:bb:86:50:4f:01:03:2f:b1:e4:9a:
31:d1:c9:d2:df:91:aa:2f:57:e1:85:da:fc:02:9f:04:0b:00:
f5:2f:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client