Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: P1hN/DCclzWjDKCUaLsGE8j0Dp1moEONWVPWUln2dHw=
Subject key identifier: 42:B3:AB:39:F0:70:C1:36:3A:77:0D:FE:89:90:35:8D:FC:A4:A0:42
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 0194BD4EBFCD81FC972E9C0F97CB34E73590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: XHHMzA0yfViMdaLxhH2yDHBUD7zCU1HM/sokOFXzXdk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:cd:81:fc:97:2e:9c:0f:97:cb:34:e7:35:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=42b3ab39f070c1363a770dfe8990358dfca4a042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:b1:ff:52:70:7e:19:f8:9a:cd:30:fd:ba:
75:bb:e3:1e:6d:be:00:50:82:65:82:b5:11:10:36:
22:7a:62:6d:6d:87:09:e0:f8:3b:73:50:35:cd:04:
78:40:60:62:6b:7c:82:50:84:1f:61:06:e8:5e:4e:
10:a8:30:56:2a:5d:f4:c3:01:9c:18:28:36:7d:6d:
97:6e:ed:ab:f9:ef:4b:05:a9:68:44:8c:99:12:19:
46:5b:ae:6d:21:23:3b:e5:0a:3b:46:f4:0c:00:c3:
5b:60:cd:8b:fa:dc:a5:c6:c1:ce:e6:3c:64:a2:06:
00:5c:61:4b:fe:96:e3:13:e1:36:c5:94:dd:8c:ea:
3b:54:4b:fe:e1:f1:49:20:34:08:b4:b5:4f:08:27:
a2:18:03:0a:81:1d:03:b9:ac:51:4d:85:d7:9b:74:
cf:65:9c:15:66:ca:6e:de:9e:fa:3f:69:b7:72:83:
89:6a:81:79:f7:84:70:5d:5a:a4:bb:48:a4:0f:15:
6e:f4:78:82:50:ec:f6:28:13:c5:ec:4a:eb:36:d0:
92:4e:55:8c:a7:4b:0d:79:fe:f6:5d:d7:a8:cb:2e:
41:84:91:d8:8d:42:25:bd:4c:51:0b:49:71:79:bc:
f1:0f:85:d3:df:9b:58:5f:0a:f2:07:31:68:d8:02:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:AB:39:F0:70:C1:36:3A:77:0D:FE:89:90:35:8D:FC:A4:A0:42
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:6f:a9:d0:5b:e6:f2:29:d2:49:94:0a:50:e2:43:bd:ec:
c8:19:38:84:4e:b6:10:4a:ab:4b:a4:9f:ef:10:ea:5d:0e:f6:
dc:c2:d5:c4:ca:a0:ce:a3:99:1f:be:42:4a:ee:27:5a:f4:38:
5f:f7:06:67:35:7c:37:af:58:ee:df:82:35:4a:ee:cf:91:26:
7b:fd:da:4c:2c:18:b1:bc:e7:da:7d:22:71:fa:08:65:51:ca:
d0:23:31:af:4e:53:5a:b2:21:1b:66:e1:b6:ec:af:f3:af:17:
8e:30:90:8f:97:5e:17:01:4b:7b:4a:36:96:9f:c1:a4:1c:5c:
f8:05:af:3f:c5:09:69:e9:7c:16:a4:e0:21:02:66:10:a9:4d:
b4:6b:5a:99:fc:c6:ba:5d:45:fb:8e:81:62:22:5f:29:50:9b:
e9:8f:58:8e:da:cd:8d:ee:1d:04:03:bd:50:fd:89:e8:b2:7b:
fc:ce:de:91:13:e1:6f:9c:55:21:c4:a4:ed:ae:a0:4e:a4:6a:
c3:97:c4:ad:62:69:53:df:a0:0d:4a:59:41:6e:f2:2f:94:63:
7b:8e:79:b4:e5:32:24:a3:92:af:e2:7f:be:a4:65:d4:1b:a3:
92:b5:77:4c:a1:57:11:2c:7f:c7:f9:93:8a:d7:99:62:c5:e2:
c4:1c:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:44 2025 by rpki-client