Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: hQvHajQ+MeLPkdBNQZPsOelhawLclvTzo/8B1QxgTRM=
Subject key identifier: 11:8F:A5:5C:80:01:74:98:6D:80:67:73:F1:8E:29:DC:D0:51:7B:CA
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 0194BBCE4843E89564119462F6989C0ADEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 0188
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: rsA23VAzEbMmWDNCLbolId/GbWAe2cSwslXQGDgqpP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:43:e8:95:64:11:94:62:f6:98:9c:0a:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=118fa55c800174986d806773f18e29dcd0517bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:7a:49:8b:db:01:6b:d8:9e:19:02:ea:22:
63:35:d4:94:71:87:d6:dd:41:1c:72:76:d6:f9:e2:
99:cb:95:77:e0:4a:4f:20:8b:cf:1f:ba:85:74:55:
a5:b1:58:97:32:d1:64:a4:29:b3:7e:49:da:4b:b9:
cb:78:ce:20:12:f5:f8:9d:9b:59:20:42:f2:b5:8c:
3b:51:7c:db:23:b9:77:20:e3:ea:e6:83:bd:e5:33:
60:e0:cb:34:a5:8f:c4:f4:b6:e8:3b:e6:47:81:bf:
a3:22:f8:cd:20:aa:16:1b:1e:13:02:f4:78:31:9f:
f3:5f:cf:c1:a5:07:32:66:93:ff:9f:ff:09:36:90:
4b:c4:1c:82:50:d3:48:b1:65:de:86:e8:fb:b7:e2:
65:15:91:d6:38:26:f0:17:19:ee:20:ed:1e:c0:40:
fc:da:d6:96:e7:58:28:03:61:45:6b:56:19:cd:8a:
ac:39:f3:5d:4f:6f:9c:68:a2:13:46:d0:cf:e4:a2:
fd:5c:6b:b5:4a:3e:77:61:17:19:25:fc:10:93:69:
25:49:a1:28:56:31:09:3c:ad:06:4e:0b:61:a0:ce:
f2:1e:c0:50:47:1a:f7:ff:d4:ad:df:a6:dd:f4:7d:
e1:4f:96:40:9f:91:7f:ff:47:06:6d:82:51:5f:50:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:A5:5C:80:01:74:98:6D:80:67:73:F1:8E:29:DC:D0:51:7B:CA
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:53:34:aa:b1:d0:36:c5:99:fb:f7:e0:48:5d:26:b5:21:c6:
e9:b1:6d:e4:c8:25:bf:cb:f7:ad:ba:aa:6c:a0:c2:78:ab:62:
07:a9:9c:52:f5:1d:f7:f1:25:43:3f:3e:bc:2e:9f:d7:8b:28:
22:3b:2e:e4:85:86:9c:f0:c1:53:5c:6b:d7:70:27:7f:93:15:
96:42:67:d5:0e:e7:0e:22:1f:aa:07:a0:b3:2d:45:01:e6:2c:
42:ec:93:28:cb:fe:fb:05:4f:d7:27:c7:a6:1d:3b:5b:35:7f:
28:60:bb:a9:b1:de:40:32:fd:11:45:f8:13:34:da:dc:09:60:
ce:04:df:46:86:15:a5:28:47:d9:51:e8:8d:e8:f5:9a:40:11:
54:fd:d5:0e:d9:78:62:86:2e:7d:00:cb:66:c1:da:31:9d:d8:
0b:4d:31:e2:7e:ce:85:e5:d1:30:63:46:03:11:45:b0:45:8e:
67:24:d2:05:60:c3:0c:6d:6a:53:5f:3b:d6:e8:bb:2c:83:bb:
5b:86:8b:ea:56:a1:f8:fd:db:c7:0a:44:30:c5:7c:e6:19:81:
08:c4:a7:d6:50:bc:3c:7d:72:f1:b6:71:12:bd:a8:b3:08:a1:
bd:3f:2b:56:8b:69:97:1a:d3:ed:cf:7c:6c:3d:3d:0b:8c:6a:
55:06:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:15 2025 by rpki-client