Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: vOQd0J8lyEWIHzUGZNzHNyTWTGlpntSb8g7nrXCxC5A=
Subject key identifier: 6E:B6:AE:A0:85:70:FE:FC:F4:77:1F:B5:52:EF:5B:01:06:FE:61:0D
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 0194BD17976462F8E9427F609F942296E6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 0C72
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: JQpnjsOMpFiQQJOrjnkEWtt3EFI.roa (hash: 4t67VWbmiq9bprri9rSmGg0uFh9lfRFrW2ITm8UtRrg=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: X3QBEPoUOa4Ah9aOy5RSmPHO54dV7BBwz15P3RWbOhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:64:62:f8:e9:42:7f:60:9f:94:22:96:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=6eb6aea08570fefcf4771fb552ef5b0106fe610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:06:22:6e:28:f6:c9:9c:28:f7:23:3a:74:
c4:6e:76:bb:8c:be:45:b9:7a:ca:46:54:4c:48:01:
1c:0e:81:a2:4d:ac:55:f8:ea:b1:38:94:0a:b4:a7:
6e:3e:f7:d7:d9:1f:5b:62:73:8a:2d:8c:80:15:0f:
d5:09:50:e6:33:de:7d:c8:30:2c:53:ec:6f:88:49:
50:43:06:48:b8:b0:e4:22:97:49:78:42:89:1a:f5:
2f:62:4b:99:5a:94:80:49:34:d5:6b:53:91:bc:d2:
6c:7f:a0:17:b4:8f:d4:00:29:dc:ce:f5:1a:d5:31:
39:09:c3:92:e2:9c:19:5b:5d:eb:14:37:2b:2b:6f:
50:24:7b:8b:cb:a5:66:4f:4e:12:42:37:34:93:dd:
34:d5:17:8a:7b:e9:56:39:50:66:fe:cd:a2:2e:07:
36:71:0a:e6:a5:61:88:64:cc:22:81:22:18:8b:4a:
03:57:05:a8:db:26:7a:3a:0e:4f:b2:06:19:5a:49:
fb:76:a3:4b:7e:24:59:8c:17:5e:51:50:b5:a9:74:
23:df:a8:3e:85:cb:7a:ad:a7:fc:3c:43:3f:e6:0e:
0a:59:eb:be:3c:f8:7f:a0:43:d0:2e:8c:e7:74:c6:
1c:95:aa:94:a0:04:4e:58:8c:e3:c5:42:7e:29:a2:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:AE:A0:85:70:FE:FC:F4:77:1F:B5:52:EF:5B:01:06:FE:61:0D
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e9:3c:29:9c:b6:02:0a:44:00:b1:df:7f:02:2f:3a:3c:c4:
d4:72:33:65:41:35:46:68:d0:16:60:c3:4e:68:20:42:8c:aa:
39:8c:7c:3c:bd:b4:7b:4c:5d:7d:54:54:96:20:4a:47:6d:37:
38:ad:5e:b4:6c:49:7d:00:83:88:37:60:f8:5e:8b:50:11:fb:
80:de:cb:df:e8:b7:2e:7c:8c:20:29:43:2e:3c:98:d9:4b:56:
03:cf:16:1f:f2:4a:96:78:aa:5c:82:ad:88:15:6b:3c:5d:02:
57:3c:ba:15:6a:ee:90:b1:69:83:80:f0:e3:b7:be:30:20:21:
3a:0c:82:3d:a1:40:4c:b6:37:9b:ea:d7:dd:3e:c6:1c:90:71:
f9:8e:e4:13:07:28:ab:c5:f8:af:0a:8b:ba:b6:fa:a6:7e:0b:
8b:49:34:73:9f:02:db:b8:6b:ac:46:1e:4e:5f:f5:a3:d1:65:
2b:20:d9:a9:8d:ff:2d:b2:82:ff:99:8b:dd:92:5d:57:c4:e0:
bf:a1:1a:58:84:66:d5:86:26:ee:b1:e7:36:4e:4d:c3:b9:a5:
1d:58:54:c7:70:90:2d:2a:07:26:37:fb:bc:c3:09:06:52:89:
c0:04:28:a4:97:94:90:5f:b5:e4:f2:19:3b:23:8a:ae:f5:84:
3a:dd:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:52 2025 by rpki-client