Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: EF8NZO44BWHD44cNDdTSQ7qazonWkTu79z0TwPIaLqU=
Subject key identifier: 9C:45:27:07:63:1E:25:C4:68:EF:C4:6B:EB:85:81:68:E4:5E:53:7D
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 0194BC052C31C6325AB8A3718AAF40DF9009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: xG0Y+VgLg5X4aQ9E/rmT1ObYochwsS1fxEXpGOnnCrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2c:31:c6:32:5a:b8:a3:71:8a:af:40:df:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=9c452707631e25c468efc46beb858168e45e537d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:45:7c:b2:69:77:aa:7b:45:0d:b8:a7:99:
5b:e1:17:22:c2:15:95:6b:2b:7b:7c:43:b1:21:6d:
f7:5a:25:77:ee:8e:cb:28:5f:41:ee:1a:59:92:62:
23:8f:4c:f9:74:4b:a7:e7:eb:5c:e0:29:15:63:1f:
cc:37:39:ec:d0:9c:e3:a2:40:7d:0f:78:b8:db:d3:
c7:15:4c:fe:75:76:27:68:8f:73:d2:47:72:3c:65:
be:a7:a4:63:67:20:4e:d3:2d:63:c1:15:a3:b4:2c:
9c:71:2f:cf:ca:b3:cf:59:4f:3d:1e:62:f5:f2:35:
25:9c:a2:d4:95:7d:38:0c:b4:f8:5c:bc:f8:88:b0:
e8:f6:f0:1b:25:c3:33:5e:9a:b4:12:3a:e3:2c:63:
71:39:5e:0d:61:1d:70:bc:f4:38:5a:97:78:9a:7c:
67:e6:d5:14:e0:fe:d9:02:2e:e3:06:b8:44:78:be:
bf:76:79:cf:1e:bf:e5:60:a5:a8:d1:90:9a:db:67:
99:ec:c0:38:49:47:00:b9:91:e7:10:bc:2f:c7:ce:
27:ac:85:c0:d4:6e:27:3c:d6:0e:1e:03:b3:61:78:
a3:82:5a:b4:53:6c:5f:15:22:23:b1:14:23:93:ee:
ff:95:0a:05:0e:62:ad:b2:dd:04:87:66:af:64:29:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:27:07:63:1E:25:C4:68:EF:C4:6B:EB:85:81:68:E4:5E:53:7D
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:33:84:ed:b1:29:c2:5c:d7:ba:d8:c2:8c:47:8e:a5:a4:
bd:ac:02:39:f7:cf:51:60:7d:eb:3c:73:9f:e7:98:ae:5d:e9:
a6:93:34:3c:c6:94:ab:76:ae:93:3d:98:d8:16:9d:b6:fe:45:
b4:52:45:90:d8:d6:d4:76:6f:b5:aa:be:cd:81:21:6d:e8:58:
fc:ed:17:af:3c:9a:25:7c:c5:42:3c:39:88:61:13:0f:a8:cd:
de:f5:5b:57:0d:57:fc:31:92:24:1a:b9:49:d0:04:43:5a:d9:
dd:d2:b3:10:0f:ac:10:73:42:5c:4b:fa:de:ac:ca:eb:c7:ec:
d1:62:e1:e8:43:00:4a:5b:68:ad:4a:4b:a5:bf:60:39:11:e3:
62:7a:b8:7d:ef:ee:48:64:a7:07:00:1d:c9:1d:5a:ac:a6:bf:
2f:ec:fe:bc:5c:46:ee:ac:34:84:7a:84:89:95:7d:98:a8:34:
00:08:6c:34:fa:98:dc:e4:93:05:68:77:80:57:4f:7d:bb:3d:
07:d6:70:15:c7:65:d4:a2:fd:24:83:d8:d4:c6:e8:75:2b:64:
ef:f8:77:53:03:39:dd:75:4c:80:db:ae:e1:f7:da:9f:27:72:
1c:01:48:20:f5:aa:9f:96:aa:c5:40:14:7e:89:4b:76:a6:08:
75:af:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:15 2025 by rpki-client