Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier: qEFQkZt2+GsM9olKrMvd78Vh1d1bu5XIJcnDpuvL46U=
Subject key identifier: 03:E9:72:09:CC:32:AA:95:83:6E:DA:FF:1D:A7:2B:8A:5D:44:84:14
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 0194BCA9BBBFCCB470754949021D05DCEFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: UnCcsT72IxAT_A7pPL3SizxwgN4.roa (hash: c7dhvZVWkHenODhaz4yGW2E9vwoS+Yy4F3XRITR7veQ=)
2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: e0QxNzz+tjiOQvcMofVr08pHBVQFi3Xe3kb8AeOsdYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bb:bf:cc:b4:70:75:49:49:02:1d:05:dc:ef:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=03e97209cc32aa95836edaff1da72b8a5d448414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:36:fe:45:6b:c0:ef:cf:76:b1:e1:73:60:
55:d9:a3:55:58:ee:8a:b4:c2:c4:27:79:7a:8d:5e:
0b:fc:17:16:be:86:90:d6:46:d5:d8:0f:09:54:bf:
dd:da:06:ae:b8:d0:f0:46:05:41:2d:c2:0d:d9:a5:
84:7f:71:2e:1b:e2:79:1e:1f:00:b8:50:a6:1a:0d:
4c:f2:00:8e:08:6e:6e:0a:07:e2:e1:5a:c2:f3:1e:
3d:14:9c:aa:e6:dd:9e:26:7c:a5:c7:58:ed:a6:62:
69:28:7e:57:26:59:79:9d:ba:f2:d3:4c:fa:ad:e5:
c6:b9:e7:76:f0:4a:6b:db:a9:3d:1f:c0:d2:85:da:
6d:ac:05:f8:a3:f7:4f:c0:48:80:bb:ca:86:15:f2:
b9:20:e6:c9:6c:7e:48:a2:20:04:23:e3:03:46:91:
76:26:cf:70:62:b0:bd:42:f7:cd:d5:10:96:72:9f:
31:8a:8c:98:97:20:a7:8e:b7:8b:d5:99:e0:87:9d:
b8:ab:07:64:a0:c1:7e:34:2e:c4:64:9a:22:68:41:
cd:3d:9f:91:65:ee:d7:66:5d:73:40:4f:62:35:ac:
21:21:7d:c9:3e:07:fe:78:76:99:1a:7b:c7:66:00:
4a:ec:81:24:cb:2b:c8:2e:79:fd:d9:b2:e8:e8:59:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:72:09:CC:32:AA:95:83:6E:DA:FF:1D:A7:2B:8A:5D:44:84:14
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cf:09:f5:07:59:0d:e4:88:71:22:98:61:0c:22:06:57:51:
10:4c:40:b4:54:cd:54:9a:02:5e:3b:a6:9a:8c:92:e0:94:9f:
e4:ee:78:ab:05:10:d5:73:4c:55:87:a9:7b:ed:c3:ec:9a:22:
7e:40:80:18:c7:c9:e7:37:20:4c:20:db:15:4e:30:10:ee:33:
54:52:88:82:1c:a5:88:87:b7:8c:b8:f6:58:72:28:49:3c:44:
96:a0:32:aa:b0:ae:4b:b7:1c:cc:86:31:33:5f:23:f7:5a:b7:
cd:08:38:bf:5a:a0:40:fd:bf:ed:e2:be:7d:cc:f2:f6:92:af:
4c:07:e1:5a:cf:64:33:c5:b0:38:b7:c6:5f:2a:dc:d1:5a:b6:
c9:26:74:84:2c:2f:9f:8b:2f:13:ad:8f:e3:3f:94:6f:f1:30:
b2:51:b9:60:33:b8:4a:63:ed:c3:7f:12:ed:33:3f:49:15:30:
72:dc:fc:49:65:87:2e:ca:38:db:7b:c3:14:67:c0:da:45:ab:
0b:7b:e2:d6:c4:1e:da:8d:b4:9d:90:ba:db:80:09:67:88:35:
34:5b:87:03:bc:f2:eb:1c:fb:3f:ac:a4:c4:cc:43:4f:5e:31:
3d:82:a8:f1:38:15:be:28:e0:8a:60:71:2b:c1:bd:f1:d4:6b:
b4:88:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:10 2025 by rpki-client