Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier: xg3VgmSwR3Bk2KAv9906ZLqzbHz7VfnGxFHRofKl4VA=
Subject key identifier: 68:16:83:D0:CB:3D:AC:35:A4:4B:7C:8B:C5:5E:F4:58:27:85:77:24
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 0194BD17C1A5C8C05F1F5978EBF416F33206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number: 071E
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: tNSzFByv7Oil6yP2eASfU9cDzIXG9FMiSPxggkjes3E=)
2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:a5:c8:c0:5f:1f:59:78:eb:f4:16:f3:32:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=681683d0cb3dac35a44b7c8bc55ef45827857724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:ed:fc:f0:08:97:b9:e3:b6:14:20:39:7e:
d8:ef:2b:26:59:ab:06:7e:f5:da:f9:d5:8e:bc:50:
cc:2e:27:18:48:9e:8a:cc:d3:78:35:4f:28:d1:cb:
52:04:82:e1:a2:e3:d7:f3:ab:77:c8:94:70:d7:da:
57:48:04:8f:4d:a1:68:fd:2f:83:4c:fc:26:68:e7:
64:8a:5c:a5:06:3e:77:96:22:7d:dc:da:2e:67:4c:
c3:13:ed:c6:78:28:a7:c5:ec:21:a0:f9:c8:fc:72:
80:82:f5:b6:62:c1:5c:70:ca:40:b5:73:ab:ef:3f:
a5:e1:45:93:d9:66:0d:ea:31:ba:ed:91:0d:8b:e7:
f5:28:4d:67:0f:96:66:d6:8e:08:1e:f0:b3:ad:f6:
34:86:45:79:24:2f:04:97:63:30:3c:c5:b8:b6:18:
e9:f3:17:60:0c:11:3f:a4:9a:95:91:52:e9:11:9e:
06:34:e2:47:40:e0:32:c5:7b:06:67:76:9c:81:62:
cb:dc:ae:78:60:3b:bb:40:b1:56:1b:21:2c:46:ca:
80:dd:4a:ea:19:8f:53:6b:53:b3:b0:b3:35:ed:b4:
a5:71:cc:f5:1e:e4:87:3a:6b:e8:39:fc:64:e1:bc:
6f:e0:d3:0f:bb:ec:4e:00:27:99:9a:c0:82:52:82:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:83:D0:CB:3D:AC:35:A4:4B:7C:8B:C5:5E:F4:58:27:85:77:24
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:cb:26:4e:7d:21:03:96:86:2a:14:bc:5b:ff:2d:8f:e9:
6e:2d:ba:af:cb:a8:b2:59:b3:36:d1:2f:ad:d0:6a:65:c3:c3:
f2:8e:87:99:6e:24:57:29:72:71:38:e6:7b:33:1c:6d:07:6c:
ed:8d:f9:b0:38:5c:5c:c9:e8:9d:84:e8:42:fc:13:ab:26:d1:
a7:c4:a5:7b:18:2e:8c:d9:2b:38:92:48:ec:98:82:74:7e:40:
66:89:5f:04:0f:17:25:19:f4:3f:33:a9:64:0a:04:32:be:38:
02:32:1a:3e:54:b0:ba:58:82:04:75:49:c2:29:49:00:f8:4f:
c0:11:c4:b4:c4:41:cb:4e:5c:b8:0e:11:a8:2f:90:23:a9:7f:
14:6f:32:11:3b:c9:16:ab:d3:a7:a1:d2:bb:da:d5:c3:05:89:
66:b2:df:76:df:49:05:d5:c4:22:fd:c4:88:dc:39:a4:d9:e5:
e0:fc:9d:a3:b6:69:fe:fd:ce:9e:25:f7:90:b3:19:5a:04:3b:
a7:9f:e7:ae:03:88:ee:df:2e:1d:6b:da:59:b2:1f:ca:14:ce:
d5:bd:7b:a7:ea:6d:1e:9e:3d:28:c9:a0:f7:ff:8d:42:ff:d4:
71:f7:9c:5c:55:27:84:04:be:57:d2:50:9f:b9:08:f6:2e:ce:
95:77:fb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:20 2025 by rpki-client