Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: Obl5qjJL/peu/+NwgK+hUh669Q7uoMI/A9I+wElaGQk=
Subject key identifier: 49:55:FF:7B:2F:FD:19:95:72:C9:8A:6B:E8:AC:CB:98:77:AA:87:91
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 0194BC3C427501657AA122DF887414FBEFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 0501
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: 0EAoD9w08zniywzSWX7zhcDxKPfHYuv1IBrKyNiCHCU=)
2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:75:01:65:7a:a1:22:df:88:74:14:fb:ef:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=4955ff7b2ffd199572c98a6be8accb9877aa8791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:95:f5:f3:f8:c1:ab:b7:56:e7:17:0c:75:
de:d5:6a:9b:60:4d:8d:6a:ed:78:25:89:02:75:fd:
ef:a3:c1:c4:e9:99:79:d8:0f:43:00:63:83:a9:ef:
83:29:c1:a8:7a:16:81:09:78:93:5a:b7:82:c4:29:
7f:55:32:24:81:1e:1e:78:59:66:a9:5c:3d:bc:83:
76:28:92:da:93:1b:fd:c6:bc:df:0e:26:45:3b:1a:
06:0f:6f:ed:5a:cf:4e:09:c6:38:aa:c0:99:f4:cc:
86:ce:91:66:a9:a2:f0:5d:17:23:7f:f1:22:79:ae:
9c:c2:01:b0:d3:c3:1a:1b:6c:3e:ab:e4:df:34:a7:
98:9d:fd:de:5f:7a:ff:60:09:63:e7:8a:76:9d:c9:
6f:ab:8e:39:a9:ab:47:18:65:be:65:79:fe:43:3d:
8c:f6:bd:e2:9b:5a:7f:83:73:80:27:6a:2e:64:7b:
64:98:54:25:a5:9c:ed:3f:11:03:ff:c4:b8:89:cc:
03:2f:e4:07:a8:e8:37:6a:bf:91:c8:c3:ae:64:35:
f4:36:14:82:1a:9f:6c:09:8c:e2:e2:c2:46:07:a0:
82:66:ac:6f:86:91:eb:79:96:d4:c6:d5:d4:04:fa:
a4:1a:27:b7:90:c9:f6:32:98:6c:e5:ee:8d:c1:0e:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:55:FF:7B:2F:FD:19:95:72:C9:8A:6B:E8:AC:CB:98:77:AA:87:91
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cd:48:28:4f:52:cb:0a:7b:01:df:4d:55:56:12:0c:19:c1:
02:62:fa:d0:b9:bb:36:1b:46:7d:07:02:31:bd:93:bb:12:01:
70:67:8c:e3:d1:9a:d6:4f:c1:74:e4:c1:56:c1:3a:84:82:63:
5d:7c:2a:b8:ef:80:44:4d:b9:5d:09:4c:09:68:93:c8:30:1c:
70:11:df:9d:a3:2c:13:b3:4c:01:33:da:cc:8d:58:09:76:8d:
b5:a0:11:8d:10:58:3e:1e:de:2d:3a:4a:5f:97:99:d9:48:f2:
61:0e:f3:20:5e:dc:74:dd:fb:05:bd:66:ce:fd:cf:b8:78:7a:
c5:81:17:75:a6:01:c1:13:64:00:ef:34:3b:4b:a8:de:7c:fb:
d5:ac:c8:5b:4a:9d:07:76:bd:1a:65:80:45:2a:11:44:81:56:
45:c1:6e:4a:0f:1e:46:52:63:ad:f4:87:ad:24:23:7f:47:c5:
6b:32:7b:cc:67:47:3b:54:6a:86:ce:55:83:fd:3c:96:9c:b7:
cd:dc:4f:ce:e8:8f:62:42:e5:df:4e:03:83:3f:1c:a4:38:c8:
c6:4d:9f:0e:4c:5a:d3:64:34:36:ca:a4:8a:0d:ed:55:78:ba:
06:c5:0e:1d:33:1b:47:c9:40:5e:0c:a7:70:78:bd:6d:b8:39:
ff:39:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:08 2025 by rpki-client