Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: Fh6EuX5AuZNDEocZ4IUxbj1AYBorXsjcWCjAljY3AnU=
Subject key identifier: AE:ED:8F:F3:DB:53:EE:29:EF:CC:37:FF:DE:CD:05:D2:AF:8C:B0:4E
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0194BD858647AEAD26D88031A859E8166A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 0595
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 1-LLRV4Lws5RBfk_IOBWyS08PdhY.roa (hash: w2Nu5EYLge3T/hRnhBjIuPbqdFqlZcs61kedmEN0JbA=)
2: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: 5Lvyue3wsZV7/zHCftvmTp8OI+aWxBxpXyhJhVY4Vdw=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:47:ae:ad:26:d8:80:31:a8:59:e8:16:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=aeed8ff3db53ee29efcc37ffdecd05d2af8cb04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:94:be:fe:09:8c:0f:1c:68:d4:ea:39:61:
fa:02:5b:21:65:4e:dd:67:25:1a:d3:14:3d:ed:1e:
e8:46:31:02:d1:f1:64:27:67:f6:c7:72:80:cd:63:
2b:ec:5b:a3:95:a5:27:46:d3:07:33:51:3f:45:5a:
25:08:dc:60:ac:c4:6e:d9:0f:7d:a9:d9:0c:bc:82:
77:5b:c0:f4:6b:6a:66:1b:1c:3f:c6:8e:72:66:61:
73:84:0c:08:a4:bd:d8:e0:69:e9:7c:54:74:f7:6b:
a1:d6:1c:09:5e:ea:9b:87:bb:b3:be:75:6f:6e:13:
34:6b:04:40:d5:e7:38:29:6b:20:95:76:41:3a:18:
a2:22:41:20:c4:3c:06:1e:29:4b:35:c4:9a:72:33:
11:4c:39:06:70:b7:f9:21:b1:ca:a9:df:82:8e:a4:
d7:49:5c:50:05:e1:0d:21:4e:f0:aa:c6:54:3a:b0:
b8:43:27:bd:8d:03:28:c6:01:a9:d9:9b:c1:0f:3b:
fd:94:d3:d4:2b:f2:a6:6e:1f:fc:85:74:34:ec:85:
22:1d:69:92:8c:8f:f6:03:b8:ac:b9:d1:b4:72:f0:
37:af:3a:71:26:d7:ff:e5:7d:b1:72:0b:89:b6:5f:
9a:5e:7f:48:a0:f5:2a:1d:40:e7:96:bc:32:38:2f:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:8F:F3:DB:53:EE:29:EF:CC:37:FF:DE:CD:05:D2:AF:8C:B0:4E
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:c5:3d:43:a7:d7:33:43:98:75:50:80:d5:be:30:d4:de:
4c:fc:a9:d2:3b:8e:00:cb:d2:1b:d2:f2:3f:fd:3d:da:44:56:
d7:f6:4b:62:9b:fc:3a:a6:ff:1a:99:4e:b5:54:2a:0c:9f:63:
d8:2b:39:9c:57:7b:64:55:3a:9d:45:14:3e:ec:0b:29:ef:7f:
9f:b4:86:3a:1b:df:53:2f:10:7d:58:05:ff:bc:04:63:74:59:
cd:c6:5a:0d:ab:60:b0:00:65:f5:ad:a3:ae:f5:73:3c:e7:36:
89:98:83:f6:b7:c4:58:c1:b7:b0:78:9c:af:6d:c0:8d:3f:a2:
58:b9:5f:3a:08:19:c2:1e:b6:8e:e6:7c:7e:f7:6e:2a:81:9d:
e8:f0:08:a8:08:49:65:16:b0:e4:ab:95:65:5a:44:ab:83:c4:
cc:37:c1:b2:53:85:d8:58:55:cd:e1:50:22:6b:ab:44:49:51:
b3:4e:64:28:1c:4a:29:af:86:93:db:7a:00:48:d8:d9:d5:6e:
0f:7f:67:a5:23:57:f4:a6:98:b0:ee:3e:bc:60:5f:7a:bb:7f:
0f:3d:24:fa:31:bc:f1:59:34:f2:78:1a:5a:83:cf:35:3a:a5:
ee:5b:3f:05:19:d6:82:26:20:53:d2:b5:22:04:29:95:ba:33:
a2:0b:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client