Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File: B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier: Gu+zbZizniOpiniIjopVubMOVHarsYw9ylgHHj9oZVQ=
Subject key identifier: 28:2A:49:40:6D:BF:3A:7B:53:45:12:CE:CE:C7:9B:82:64:4D:8A:7D
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer: /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial: 0194BCE064B0E347586F319445ACA2AE4049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number: 0A90
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: lAOAuUvdVabGZEcvvA4dIQ6OAh0XUSuMel1OGPyy29I=)
2: CxCDh51hJryNPM51K0PBFglnj6s.roa (hash: NMl10T/JTlSsGDyTehyeNpuYxe8bg8ZQ55g2bqhBosQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:64:b0:e3:47:58:6f:31:94:45:ac:a2:ae:40:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=282a49406dbf3a7b534512cecec79b82644d8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:9f:59:7b:2b:13:70:61:1c:12:87:6b:35:
f3:06:1e:83:05:cf:e1:ed:a4:68:45:62:19:3d:f8:
0f:c2:fe:22:ca:77:6f:a9:b8:1f:aa:48:34:4e:28:
de:96:de:ed:a9:6b:cf:c2:4c:6b:f7:b6:d2:3f:fd:
d9:06:91:56:05:5d:bf:f6:ff:c2:c5:99:f9:b2:42:
d1:1b:cf:e2:a5:7e:81:61:31:c4:68:76:fb:7d:c1:
0f:c3:24:ac:1e:f7:f1:70:c8:1b:8d:71:13:7e:0f:
02:6b:7e:fd:72:c6:5a:52:a2:a1:16:d5:0d:8b:54:
52:27:a7:39:68:df:c6:83:fa:c6:94:53:a6:a3:dc:
69:33:c7:1b:9d:cf:4e:c3:27:cd:56:bb:c7:00:74:
bb:b6:dd:8a:78:f6:2c:46:28:d6:a0:61:25:9e:92:
c9:5d:a1:6e:10:ea:e1:c4:e7:4a:6c:fb:81:cb:72:
1f:39:01:c2:bb:1a:00:d5:15:ea:af:d2:e6:38:f4:
23:a0:7c:d6:96:40:82:78:d6:e6:08:02:f5:0e:97:
11:80:af:a5:2f:26:2f:87:96:d4:d9:08:62:45:ec:
b2:39:b8:fc:3a:f0:7a:3e:b5:aa:e0:4d:ca:0a:0d:
2b:50:69:64:46:52:0a:f1:a2:d2:bf:ca:c2:9f:ae:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:49:40:6D:BF:3A:7B:53:45:12:CE:CE:C7:9B:82:64:4D:8A:7D
X509v3 Authority Key Identifier:
keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:79:0a:de:dd:d8:6a:a5:52:ed:be:7f:73:f1:56:78:d4:
07:8f:ed:d5:bb:e1:ee:90:ec:fa:b0:6c:76:ec:18:f1:9f:00:
77:0c:cc:f9:36:46:81:9b:33:4a:a6:02:11:1b:2c:36:ee:fd:
5f:19:27:fc:34:27:e0:76:c3:f1:d3:21:c5:6e:e5:b0:bd:c0:
83:1c:df:c1:b6:c8:68:fc:59:6b:d3:0a:7b:4e:0e:80:21:04:
be:fc:39:52:bd:3c:c6:db:23:a9:05:91:b1:d9:97:b6:73:22:
d7:c7:bd:f1:57:9f:b7:db:12:7a:aa:c9:9b:56:0f:26:f6:bd:
42:3f:2a:bf:0a:e4:c1:ec:4e:a3:e5:fc:c4:c5:e2:00:62:8e:
a6:49:74:92:46:ab:b0:b5:b1:65:ee:55:d0:ce:b6:ee:50:93:
00:b8:c4:92:d7:ab:89:21:4b:18:b3:66:5a:a8:02:0e:6d:7f:
a7:51:1b:d9:60:f8:f2:47:56:09:51:00:3a:81:d9:86:ac:94:
04:4d:1b:fa:7b:76:dc:09:26:12:49:86:19:11:b2:51:02:6d:
ad:79:f9:ca:57:96:05:7a:c4:b1:af:9c:81:43:a7:46:44:79:
1b:e2:f6:57:77:10:89:c1:da:ba:0f:3e:25:d1:33:e4:fc:ad:
7d:00:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:48 2025 by rpki-client