Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: ymyRmSaVR/9pmy2uvzpRCpBc2cIf+ZKXoQofiRx5wdk=
Subject key identifier: 85:23:E8:5A:85:FB:62:2C:18:D2:D5:A2:12:5C:44:D7:36:BB:5C:BA
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0194BC3C6FAE0201698AA2DB6A1CD8FC8B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0D2A
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: LAEF9AXljqCzg0jPjMwfd9psW/fLM7vjrb6s/HiWOsA=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:ae:02:01:69:8a:a2:db:6a:1c:d8:fc:8b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=8523e85a85fb622c18d2d5a2125c44d736bb5cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:8f:f9:2e:f4:bf:84:86:9a:9f:40:19:1b:
ac:ab:07:e6:c2:5d:03:2e:ce:d3:62:00:b6:2e:a3:
27:e5:98:29:63:3a:e8:49:3a:61:6d:1a:35:05:31:
8c:18:af:00:49:fe:ea:e8:8a:a9:77:c0:48:ca:98:
8b:7f:da:42:3e:4f:bd:c9:79:85:14:84:49:8b:40:
e0:df:3d:99:81:24:d1:e7:7a:b2:20:29:02:64:a7:
7a:c5:0c:45:fe:71:26:39:df:95:ff:61:5b:2e:e3:
58:d1:fa:5a:ef:a8:3b:a6:53:8b:47:6a:4e:fd:f2:
80:1a:d4:0e:11:a8:8f:7f:3e:3d:18:a5:5b:79:9e:
ee:98:c1:ae:b0:33:1a:93:07:04:2f:49:a9:0b:19:
0c:70:59:83:71:79:13:db:5a:98:ba:2a:7a:47:b6:
24:34:dc:20:30:34:93:08:71:eb:56:61:27:79:cc:
79:b3:f5:25:32:26:d6:21:d1:fc:9c:f3:4a:ac:66:
cf:db:23:46:55:ce:dd:36:2f:2c:31:d0:19:5e:6c:
33:8e:29:96:bb:70:f6:52:2f:0f:6f:1c:d2:41:18:
14:d7:98:76:85:9b:e8:fc:64:fc:1a:4e:ea:98:d8:
ed:61:55:85:c5:f2:26:e1:70:d4:59:cb:b4:83:d9:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:23:E8:5A:85:FB:62:2C:18:D2:D5:A2:12:5C:44:D7:36:BB:5C:BA
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:6a:cd:c0:84:62:b8:cb:42:04:cb:d3:a3:b0:a7:ec:4b:
ee:50:51:88:92:06:0c:11:e6:1e:35:98:48:1f:f3:30:ca:f7:
32:2f:3f:e7:33:5d:d7:ad:75:45:d9:2f:9a:7b:9d:7d:95:f9:
25:52:32:6b:2f:ba:28:03:2e:e5:d6:26:55:82:21:96:57:d1:
49:54:36:24:5d:19:69:94:d5:79:60:c1:87:a0:4f:ac:63:65:
33:e2:cf:23:ce:07:de:dc:0c:65:2e:95:72:f2:14:03:d4:78:
99:9b:94:3e:3a:47:8a:7e:7e:f2:fb:b7:f8:4c:b1:63:19:41:
01:8b:db:35:2c:5a:cd:78:1c:6a:c7:c2:18:05:72:ac:76:fa:
0a:f3:49:9b:8a:23:bf:02:67:e1:d1:79:79:60:08:51:6a:b9:
5c:4d:e9:e7:8f:ae:17:32:08:ca:7c:0a:c8:72:b6:b8:31:5f:
1e:08:8e:73:cf:8d:cd:d0:8f:04:4e:47:8e:cc:47:1d:3a:40:
14:bf:74:c3:bb:40:d7:3f:4f:2b:dc:6d:96:7c:fc:33:b1:34:
85:d0:9f:32:c1:7a:c1:d3:73:bb:3f:ce:72:1c:ce:d7:2d:f7:
21:c0:69:ce:7b:ea:58:8b:c7:9b:1f:d9:77:90:6b:86:e3:28:
d4:c5:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:31:26 2025 by rpki-client