Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: H+1ffjp5afNeBvvO8mFpC7ABXFeTiLOKFi1MjjyYVmM=
Subject key identifier: 67:40:E1:4C:81:F8:A2:62:11:F4:D2:FC:51:37:67:ED:F7:57:F2:A4
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 0194BD17A312D16F32D620558EEF55CD4C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: XuHWtE6vD0W1Tj4lQ0j3pE0tb4moV7/dauisyTduuTo=)
2: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (hash: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:12:d1:6f:32:d6:20:55:8e:ef:55:cd:4c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=6740e14c81f8a26211f4d2fc513767edf757f2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:f4:b0:33:42:63:05:fb:42:80:ca:fc:da:
20:c4:32:bd:f8:c0:36:6c:6b:b5:e4:26:2e:b9:35:
c1:21:b6:0a:81:1c:ea:c8:c0:2b:b2:28:96:f4:b3:
ca:77:4e:78:a9:a9:9b:bd:0c:a8:9e:c9:3c:e1:24:
7d:44:15:f5:f7:59:b2:5b:97:57:c0:3e:fe:a0:ab:
86:ef:ab:2a:97:ac:cf:46:9f:ee:2e:09:14:06:b7:
d2:cb:c8:c1:4b:d1:fb:eb:ab:d3:8f:c6:d4:c7:78:
9e:84:38:d6:3c:6b:86:48:3a:b5:cb:79:5d:83:83:
27:6d:a6:54:88:81:0f:c7:46:d3:45:cd:2b:5c:b0:
ba:40:49:b9:b1:16:f5:9e:aa:8f:d1:2c:39:3a:5d:
ff:34:a2:a2:9f:ca:ab:ef:84:34:7e:c2:50:70:8b:
3b:4b:8b:98:48:d5:14:73:65:95:e6:9e:73:1d:c2:
d5:65:30:07:7a:b6:e1:99:ac:dc:f7:b8:ad:2a:3f:
a5:16:5d:2d:6c:fd:1c:9b:80:b7:16:4c:1c:61:f6:
22:9d:77:36:2d:97:2b:57:b6:06:a5:ea:af:d4:bc:
fd:e1:04:d8:5b:6a:a7:65:05:98:78:4f:3d:74:e4:
ee:58:04:ea:bb:49:0e:cc:e4:a4:33:41:da:3e:2e:
32:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:E1:4C:81:F8:A2:62:11:F4:D2:FC:51:37:67:ED:F7:57:F2:A4
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2d:e7:10:49:54:8e:33:ea:07:c8:22:18:14:42:58:42:74:
b8:15:78:a7:67:40:a6:08:4a:11:fd:0c:e5:c0:2b:2b:a8:6d:
3d:0b:0b:88:1a:98:2d:d5:cc:29:a2:a2:5a:30:6e:b0:08:06:
34:de:0d:5d:db:37:b4:8a:2d:05:c6:a7:b1:08:df:c0:b6:9b:
fe:5c:d6:90:ce:77:a3:86:37:ed:35:6f:86:c9:46:c4:9c:43:
b4:16:08:6e:15:db:1f:ae:67:89:e8:65:08:42:6a:16:99:e2:
f2:75:6c:94:1b:e3:92:8a:31:98:3a:27:88:2d:b2:ad:92:db:
2d:fb:b5:cf:b3:19:fc:04:e0:bb:6d:e1:b6:4f:eb:25:df:62:
70:a0:e1:a8:30:81:d6:45:b8:c8:be:86:a6:3c:c7:52:4e:a3:
11:0d:d0:45:df:54:9a:f3:86:7a:c3:f3:76:2c:ef:e9:b3:c8:
18:3e:6c:e8:59:6d:4f:3e:c1:5f:29:b6:4e:dc:10:b7:77:cd:
1e:03:35:71:d0:3d:d5:a6:9f:8f:40:f1:93:b3:45:f2:3c:21:
3b:3d:87:13:43:a5:14:7d:0a:4e:85:60:1c:7a:cc:ae:70:7d:
48:c4:31:5c:02:9c:f6:eb:ed:b8:f5:66:37:d4:1e:bd:24:26:
15:ed:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client