Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: KTd2f3xhs3yOdoz1g3sdCkvOZ3iXpSQcArMy4WOMOvk=
Subject key identifier: 74:2B:09:F6:22:A5:32:7D:D4:D5:8C:AC:2D:F5:8A:2F:2D:FD:5B:92
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 0194BD17BD047FE168404E949F5A0D0CA6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 0EF5
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: ArqFQJoJTRm+IOcGBWcSY6mhikxZeyYvp8RdG6Lx+vE=)
2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bd:04:7f:e1:68:40:4e:94:9f:5a:0d:0c:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=742b09f622a5327dd4d58cac2df58a2f2dfd5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:b7:43:bf:08:c7:e8:e2:38:d7:03:00:f2:
04:1c:be:8b:09:c2:b3:28:f4:d9:d9:f2:ac:06:e3:
a5:4c:25:d9:7c:ef:a6:44:1f:5e:94:fd:5b:cd:76:
71:d5:38:61:3e:cd:6d:1c:4a:83:22:49:26:23:9c:
2c:42:47:aa:ba:53:45:b2:40:9c:d9:e5:b2:73:13:
a7:92:3c:81:d9:a1:23:0d:b5:63:88:9d:65:91:b9:
e8:3f:c8:cf:18:71:54:7b:26:79:4a:88:7a:f1:e3:
b7:6d:56:84:3e:4c:13:15:c9:95:bf:c2:bd:93:c5:
67:82:d8:c3:17:3d:14:80:ad:d3:82:d0:0e:37:70:
8f:92:f2:c7:c7:73:ba:0d:40:81:51:c3:d4:f4:92:
1a:d8:4c:c9:31:b0:5f:78:8e:cd:f2:bf:b3:f6:67:
73:f8:0f:cc:f5:fe:0c:ad:65:47:46:b6:a1:14:d3:
ae:48:94:a3:e4:a8:23:53:9c:24:08:e1:85:0f:1d:
a1:e5:1e:5e:a9:d4:24:bd:68:e0:56:88:f3:0a:7b:
24:ff:b1:73:96:2d:1b:a3:38:ec:69:99:76:68:09:
04:4b:86:f3:32:30:f9:02:47:7b:c7:83:15:33:1c:
47:42:79:0e:04:15:20:c4:db:7e:02:05:07:07:98:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:09:F6:22:A5:32:7D:D4:D5:8C:AC:2D:F5:8A:2F:2D:FD:5B:92
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8c:c6:b6:0e:5b:5b:19:fa:8d:00:64:f5:e5:03:c6:46:f5:
68:e0:d6:0d:f9:53:5a:b1:52:87:67:3a:3f:76:a1:41:bb:3a:
a0:fb:70:b2:fe:1c:cc:77:64:97:08:01:99:8b:75:e2:7b:6d:
06:51:5f:4a:4e:f8:93:18:79:a0:50:6b:0f:18:00:cd:2f:cc:
4e:f8:87:9c:27:7a:a2:60:97:4c:d9:a8:97:69:21:d9:6b:2e:
63:17:26:28:c4:63:fb:e1:85:a4:c7:73:73:f1:75:11:f8:4d:
49:3c:ca:80:70:d2:61:9e:ce:e9:2d:cc:79:d6:13:20:f1:eb:
48:83:d2:70:ba:9c:93:f1:ef:cb:ab:6f:0a:43:f2:22:3c:99:
40:68:07:f1:26:d2:b7:c4:ef:f2:c7:de:a2:f1:56:86:3b:10:
ce:2c:63:dd:48:68:46:27:8f:5f:e7:19:22:ca:02:2d:ea:94:
01:d6:1d:ae:03:ab:bd:5c:ad:88:3e:c5:73:58:81:fd:f4:e4:
8b:09:ef:47:34:e8:fc:f5:b4:06:bf:89:e0:13:70:31:8d:22:
92:9f:3e:ab:7c:33:4c:19:fa:a2:21:b0:c9:9d:40:d8:7e:a5:
a0:89:6d:bd:1b:32:79:b4:65:f4:7e:76:e4:d0:b5:86:79:3c:
1b:dc:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:30 2025 by rpki-client