Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
File: 53OduQwc6YQx3zSKE3blOsbgUjw.mft (raw, json)
Hash identifier: rd5b91+4wbFLNofkVugloB0eC8Y11q4ELrdkv+1vmdc=
Subject key identifier: 3D:65:8F:23:05:87:80:CE:E9:58:49:A6:03:6E:87:0C:D2:C5:DC:40
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 0194BBCE772309A7C783939024F0A9C063BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: 53OduQwc6YQx3zSKE3blOsbgUjw.crl (hash: LSyV4faF7Jmuodz91CKxhl2Rb414uJuTEJFozpYz3dc=)
2: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (hash: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:23:09:a7:c7:83:93:90:24:f0:a9:c0:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=3d658f23058780cee95849a6036e870cd2c5dc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:ed:7e:bb:4f:49:cf:68:85:64:3e:89:32:
bc:60:99:29:13:67:9e:f9:ca:04:94:a6:85:7a:05:
0f:17:eb:9a:87:2d:4a:7f:5f:78:87:85:bb:3b:11:
60:99:16:e3:ef:fb:41:17:13:f6:9b:39:e9:d6:bc:
38:1a:fb:82:99:88:87:2c:6d:4f:d3:77:80:92:cd:
82:87:cb:82:5b:2d:16:22:83:19:38:55:72:4d:eb:
fd:8a:d9:0f:78:e3:f9:23:a7:49:1b:d8:92:ed:23:
69:6e:14:cd:d8:ee:bb:7f:e3:a9:5b:cc:12:57:7b:
c5:c5:41:b3:3d:6c:c6:c2:82:09:23:f3:20:f8:e1:
e0:24:24:21:83:e3:1e:1a:62:0d:09:d0:20:66:7f:
ac:0e:a3:9a:4f:ea:9b:72:f4:b9:dd:22:6b:2a:e9:
f2:d1:df:b7:0b:87:47:ae:15:c9:36:b9:43:58:8e:
1e:97:15:43:42:b3:b6:15:86:0c:af:db:f4:c7:7c:
f1:be:32:fa:78:29:d9:82:d9:98:b8:02:3b:77:b6:
ea:ab:d9:b8:af:75:f8:c4:24:a9:bf:3a:d6:ea:b3:
4c:59:65:9d:6f:1a:3e:a0:d6:fe:d7:12:13:cd:46:
56:f4:75:dd:01:ae:91:ba:d9:4e:b6:33:79:ff:75:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:8F:23:05:87:80:CE:E9:58:49:A6:03:6E:87:0C:D2:C5:DC:40
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c0:bf:81:d8:93:f0:e7:96:c9:93:7c:30:19:14:95:19:ac:
9e:4d:07:d6:a7:20:16:12:fa:ed:4e:5d:27:0a:de:a7:a2:7c:
97:e9:a5:45:c1:89:6e:fb:62:66:43:e6:f2:fa:8a:27:e2:5d:
5d:55:d5:69:b6:27:ac:08:85:99:8f:d0:f1:9c:a9:e0:09:d5:
0c:1f:14:30:b3:de:e0:2b:0e:c8:e5:58:09:e0:cf:b2:12:71:
cd:df:7c:2f:d3:d2:72:7f:32:38:ee:b7:aa:40:4f:f8:21:59:
c8:df:f8:02:ff:35:81:eb:81:a9:24:b1:d9:37:5e:ce:cc:8e:
0c:90:6f:3d:bb:84:34:6b:73:df:9d:31:94:b3:59:52:af:24:
5b:ef:1e:a3:71:a0:73:9a:03:3f:90:d8:48:73:7e:07:d1:c8:
5a:4e:b6:87:01:90:8a:86:5d:50:f2:52:d2:f2:06:eb:76:46:
a1:95:6b:83:06:53:d6:50:79:86:63:d6:c4:c0:23:e8:fa:03:
61:e2:50:e5:cf:ee:66:41:3c:62:80:33:2e:df:8b:52:b5:51:
db:2e:f7:b7:87:fd:06:50:50:71:e8:f7:36:a6:97:ef:ae:c3:
09:5a:5a:dc:82:3c:6a:1b:4a:e5:59:2d:1f:b7:73:9d:be:48:
41:3d:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:13 2025 by rpki-client