Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
File: eyIdrMbD43H18LsnbJ_liMXuX9w.mft (raw, json)
Hash identifier: rfhH5C5GDGmixeqw6eRmdFIOid1DwkbL5+OxJC+LzHE=
Subject key identifier: 93:84:FB:95:DA:7C:CE:23:27:22:B1:F2:C8:4C:38:09:1B:1F:9D:CF
Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
Certificate issuer: /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Certificate serial: 0194BCA9C364DC83252D3E3767F398F5560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
Manifest number: 108D
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: eyIdrMbD43H18LsnbJ_liMXuX9w.crl (hash: RhJVwq0T5r03UybjrAX0nCrkIBfMeyWOTRldj7fra5k=)
2: m7YB0ysmvsiL9XYYrpj2aATLMRs.roa (hash: j1QmuoAJ87cgiclsdXh2IU8pK6QzoofrfJbDFJrkvV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c3:64:dc:83:25:2d:3e:37:67:f3:98:f5:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=9384fb95da7cce232722b1f2c84c38091b1f9dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:72:72:7c:83:13:73:4f:75:80:af:65:6e:
6b:4a:13:5e:e2:a4:66:36:74:3d:be:17:1a:28:56:
49:ec:f0:b2:35:4b:13:d9:a9:29:70:56:7b:19:d7:
f1:a0:5f:6a:16:43:78:23:7c:37:9a:d4:48:75:d8:
78:6f:c7:7e:19:9a:af:a1:d3:74:2d:b3:25:90:8f:
ad:41:0f:2e:2b:c3:ef:d2:72:21:c2:49:fb:32:6f:
40:99:03:14:16:9c:70:aa:b3:5c:72:07:6e:48:94:
9c:c2:93:6d:37:a6:22:20:9a:18:c9:57:3a:f3:0c:
ae:9b:ec:d7:20:cb:98:d7:1c:6f:fd:ef:6e:ee:0d:
ac:cb:5b:dd:15:8d:8d:9b:86:d6:bd:3a:79:c5:6b:
89:a5:9b:aa:80:6e:df:31:56:ba:3b:98:cc:84:d9:
a2:07:3a:4e:cc:12:d7:8f:3c:83:cf:03:46:16:21:
48:a0:75:4e:96:0e:d2:db:44:ae:6f:df:e8:aa:98:
6c:ea:43:66:20:8d:e2:38:33:be:49:7d:19:f2:1b:
52:0c:75:09:84:72:3e:e0:56:f5:08:53:6b:7d:cc:
d6:84:20:89:04:32:bb:32:02:ac:27:6f:a1:3b:9b:
2b:85:71:76:24:5b:cb:71:0c:e1:f0:ad:a7:17:f1:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:84:FB:95:DA:7C:CE:23:27:22:B1:F2:C8:4C:38:09:1B:1F:9D:CF
X509v3 Authority Key Identifier:
keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:47:28:e7:e5:17:14:9e:4d:01:70:cb:8b:e1:9b:6e:dc:
94:ef:d9:49:42:38:53:24:0d:65:83:a5:0e:da:77:f9:5e:d3:
78:74:fc:f9:81:fa:ac:a0:d1:54:c3:5a:61:d3:52:b8:dd:75:
0f:80:29:fc:96:0f:32:9d:ae:c4:8b:f2:5d:76:51:cd:87:b0:
8c:d2:dd:da:e0:b3:a8:ac:84:7f:8e:fe:11:e5:9f:4d:a6:42:
23:6b:95:68:94:11:9f:42:a6:23:cb:d7:a3:66:1a:82:e8:e8:
9c:f8:76:cf:9e:f7:93:b2:5e:87:1a:72:0c:6c:f3:0c:b5:18:
9d:5f:6b:e2:11:d1:b7:43:74:49:34:80:d9:4f:35:91:00:bd:
d5:dd:09:9e:6f:ea:da:83:c2:e8:d0:a8:3a:a7:ef:32:90:00:
79:97:a2:10:67:1e:cb:8a:be:70:cc:51:59:06:fe:bb:cd:bc:
bd:7f:aa:40:08:ed:65:b4:d3:4f:29:7c:63:0c:fb:d4:63:db:
78:f8:3b:ef:c0:9a:4e:3b:ce:a2:65:06:84:61:bd:b2:43:e9:
3d:ed:3f:d8:34:3a:5d:2d:ab:b1:8f:e0:ba:8f:b7:67:d0:4f:
86:5b:81:a5:21:f4:c5:a7:bb:ab:28:ff:cb:27:0f:54:5b:ad:
09:bd:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:29 2025 by rpki-client