Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: u78TzhGTb76sYl74YB2zUP+OwxzOOar0R3D2d14eSEw=
Subject key identifier: F4:FD:4F:17:5B:0B:AE:4B:26:B0:0B:A1:B9:C9:DB:A9:E0:AA:50:8A
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 0194BBCDB183E413C8E15C989F0ED7027197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: SoxALGMnm4UWdK+8iS+SY9L+vwMe1z7S3VGShRHnZDA=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:83:e4:13:c8:e1:5c:98:9f:0e:d7:02:71:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=f4fd4f175b0bae4b26b00ba1b9c9dba9e0aa508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:7a:9d:3b:92:d7:65:47:1e:a0:73:38:e0:
44:3d:cb:5d:23:82:7e:29:4f:55:d8:fa:5f:ac:39:
f9:da:d9:16:34:a7:10:ef:34:4f:1e:98:72:e1:75:
08:4c:85:1a:db:a2:70:09:bb:2b:35:19:84:3e:42:
c0:63:6a:7b:f4:4b:5a:f3:c5:ea:ca:cb:f1:44:d7:
84:d2:ff:4d:c1:56:69:bb:6c:30:e1:ea:bd:77:d0:
60:ff:89:ed:5c:57:7c:8b:e6:ea:4f:9d:a3:ce:f2:
31:dc:40:8b:65:aa:88:82:6a:eb:ed:be:05:56:d8:
ba:df:32:0a:25:5f:3e:c5:14:3d:ec:3e:5c:3e:2d:
f1:c0:10:7a:79:5e:e7:e3:7a:10:7c:2d:a0:b0:ae:
93:b8:5c:e9:f1:a9:40:06:ac:97:c7:c8:cc:19:89:
b9:01:12:62:73:ef:11:cb:8b:1e:29:f2:b0:e5:ca:
c0:d8:67:75:67:90:79:f2:77:e0:46:20:09:e2:e3:
fc:62:52:cf:8c:10:b3:30:4f:43:5a:7a:3d:2b:1b:
5f:19:8b:ae:35:da:d2:ee:a2:93:71:68:de:26:5c:
6e:ce:76:28:ab:79:c8:62:5e:cf:a7:21:54:bb:af:
e1:cc:14:f2:52:23:4f:8f:81:7f:aa:fb:ba:59:75:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:4F:17:5B:0B:AE:4B:26:B0:0B:A1:B9:C9:DB:A9:E0:AA:50:8A
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:92:ac:76:38:2d:67:e7:e3:0b:55:1e:b3:a0:99:ab:e0:e1:
6d:ae:08:23:7a:c9:68:e4:b9:5a:c3:6b:ab:2f:69:84:9e:7f:
fa:ff:3d:99:94:3e:2d:74:0c:df:92:24:63:28:1d:94:a2:b0:
2e:69:48:f1:9d:86:d3:e7:2f:c1:3d:e1:23:cf:d4:6d:29:59:
13:65:79:4b:93:90:a7:8b:48:9c:27:22:2a:de:9d:98:dc:36:
f4:f9:58:df:24:aa:83:fb:6a:09:5f:65:6c:ad:07:87:6d:da:
38:c9:b4:25:73:7e:43:84:74:c1:9b:40:4f:d2:59:c0:b0:13:
bc:7d:1f:82:dd:e2:a4:1f:cb:d3:06:d7:21:73:e8:7e:9d:e0:
d0:85:d3:89:f1:e1:27:83:3e:c9:99:53:b8:f2:9c:58:cc:e6:
e3:c5:43:51:55:32:63:30:be:6e:14:f0:61:4d:ad:1c:f3:6f:
46:b6:c3:2f:68:5d:94:60:b6:e5:f7:b2:53:74:2e:9d:b4:73:
25:a9:f6:1f:37:96:dc:32:29:b9:5f:e0:80:5c:4d:84:c8:cd:
b9:23:d0:1b:8f:6c:64:88:40:51:c1:dd:56:90:53:02:00:5b:
1b:3e:16:ba:c9:5a:ef:90:e1:d3:be:03:a2:2b:13:5e:29:ce:
5f:a0:0f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:50 2025 by rpki-client