Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
File: M7S1t7Icrr89IICfbFcFmfHWBGg.mft (raw, json)
Hash identifier: Yf0t9eChHl6n2x8tuSIHMXT7mJGs7F65I39oZqi/N7c=
Subject key identifier: 4A:0F:E9:03:8E:21:DB:EE:B9:A8:5D:D1:A0:13:42:31:A2:48:A0:BB
Authority key identifier: 33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
Certificate issuer: /CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Certificate serial: 0194BCE0B7543925E9A9A268E0E7E09B8B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: M7S1t7Icrr89IICfbFcFmfHWBGg.crl (hash: FTLXhPeSleM4pAnK49zXTNW9apVz9ETeAb+p37uB+K8=)
2: r7a6D_FkR9xhVp2w9lPW31aBNv4.roa (hash: XnCRXOHC4FDX1dXWIOiOTBOBjGntvWRiOFTSpLk90Dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:54:39:25:e9:a9:a2:68:e0:e7:e0:9b:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b4b5b7b21caebf3d20809f6c570599f1d60468
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=4a0fe9038e21dbeeb9a85dd1a0134231a248a0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:b7:b8:87:f4:7f:b7:ca:24:79:72:1e:4d:
dc:cb:9c:26:8d:87:f7:b8:7b:fb:85:7c:37:e7:5d:
63:e3:d5:d7:78:94:86:18:1f:60:73:42:1a:9e:f4:
c9:f2:86:63:bd:cf:06:2c:a8:47:5e:ce:ef:9c:c6:
cf:47:5c:a1:8a:20:f1:48:50:4e:3b:16:39:0a:ab:
50:1a:c2:46:e5:b9:80:5f:99:6c:de:0b:02:05:55:
9d:bf:bc:b5:5a:9d:e1:ee:7a:c4:7c:07:45:7c:0a:
03:21:34:28:d0:18:0a:f1:77:d7:e4:b4:7f:8e:93:
5f:b6:e1:02:55:f9:86:5f:35:2f:91:e0:fb:5e:64:
35:94:3e:40:76:49:f1:83:fc:24:35:cf:f2:4a:d6:
ab:4a:f0:60:4d:38:57:2f:14:4b:ad:ec:d4:49:a1:
69:26:9e:bb:c0:3f:b0:64:51:17:2e:55:bd:29:c7:
d5:72:7b:18:14:b2:be:7a:f9:bd:1d:27:d8:32:2b:
95:6e:a3:a1:84:f7:0a:79:81:a5:6a:e8:5c:df:88:
fc:7f:68:64:f7:0c:b3:90:09:fb:90:fb:69:65:a0:
d3:5b:f4:ac:57:32:80:ad:9c:0f:7b:08:e0:d7:4e:
f3:8a:5c:ae:80:22:88:b4:8f:5b:fa:f5:4b:3f:c6:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:E9:03:8E:21:DB:EE:B9:A8:5D:D1:A0:13:42:31:A2:48:A0:BB
X509v3 Authority Key Identifier:
keyid:33:B4:B5:B7:B2:1C:AE:BF:3D:20:80:9F:6C:57:05:99:F1:D6:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7S1t7Icrr89IICfbFcFmfHWBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/846d6e-04ec-4219-8223-8623335c0ee0/1/M7S1t7Icrr89IICfbFcFmfHWBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cd:9e:65:0a:af:9a:bc:b0:ee:bd:c8:85:e1:99:b2:46:fa:
f6:b2:b4:ad:98:08:3e:ec:19:70:77:f0:bd:3f:cd:18:f3:bc:
1c:be:0d:16:16:29:23:d6:51:d0:43:dd:78:2e:ca:2d:4b:9a:
04:3c:c1:c5:84:18:f8:6f:76:a4:78:41:b6:0d:a2:0d:03:6e:
be:23:6b:2b:8e:cd:e3:9d:5c:db:2e:07:93:1d:12:cd:03:f9:
e2:bc:b8:21:18:5a:f7:af:2f:13:e7:bd:f6:a5:9d:3a:55:ef:
32:b6:e4:16:21:49:9d:49:4e:41:9d:5f:11:3a:b8:b1:4f:08:
fa:98:60:18:19:30:c0:96:94:22:04:95:34:a7:df:85:64:a3:
68:96:c6:88:e0:a8:71:d4:b4:41:c9:9d:0e:cd:cc:5c:ee:cb:
ef:d6:89:45:34:cb:c7:10:32:ee:a1:15:03:c5:c5:89:ff:7a:
91:76:27:89:e0:00:d6:de:89:a6:7f:0f:87:85:c1:37:62:bf:
fb:ed:e1:09:6f:2f:5f:d7:3a:92:3c:5e:f7:24:9c:fb:83:91:
15:33:0c:25:97:61:25:d8:bd:3d:d0:16:3b:ab:0b:55:9d:4d:
63:51:59:6c:94:4c:db:08:99:7c:bf:a6:26:63:54:36:a9:dc:
a4:08:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:39 2025 by rpki-client