Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
File: B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft (raw, json)
Hash identifier: tOURVHRlVcyyfSdAqPcTob/wdCm95ruCmEcWzQwKjIU=
Subject key identifier: 55:A7:75:A5:91:99:5E:FC:1C:FD:A3:D5:15:65:0C:B2:97:5B:F7:EF
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0194BC72B7D800DE3228339E6EC04464D1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
Manifest number: 0217
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 9lKmJj_ZLFv4ptJxTXen7ZoNJWE.roa (hash: 3YWqbiEokG10sGtdS2bUASTdZTS+zMkhvOaBu3Vhrtw=)
2: B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl (hash: P7YjCW0pLNdEPvvv2BwV7PyHz9Oe0F7k94+49p0dR7M=)
3: BEs4jr5ihG6iRqRU5cUSDL5kRog.roa (hash: cWYPPJkN2Kgx8P4ZXPtPBFDG5DzBZcOtlwsZBu+Q2cQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:d8:00:de:32:28:33:9e:6e:c0:44:64:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=55a775a591995efc1cfda3d515650cb2975bf7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:c5:97:4b:43:6c:6b:b3:e5:bd:37:c8:d8:
db:31:57:93:4c:7d:49:83:20:9e:36:5c:bd:c1:8f:
29:ce:69:8c:d3:3f:9d:a8:7e:f2:d9:67:03:2f:88:
9e:e4:bb:80:8f:e9:c7:07:e3:71:06:39:b5:04:1d:
c9:d6:f3:44:30:bb:9a:ec:f5:45:2e:09:ae:06:68:
6c:cf:fd:61:67:cd:85:08:a8:81:6a:e5:21:8c:a8:
d8:5a:67:dd:7b:ab:62:a4:e3:bb:b8:82:c3:08:f5:
d9:54:d9:c8:e4:0c:9d:c7:cb:da:41:a6:31:14:48:
a3:b9:eb:2f:78:b2:d8:61:42:62:64:ca:4e:58:db:
10:5e:9f:5f:23:b3:88:fa:bf:17:e8:1b:59:9e:65:
43:f0:09:13:ae:2c:42:5d:a6:cc:2c:af:21:6c:76:
f8:72:a6:11:be:62:56:0d:36:d8:25:16:4b:9d:ca:
70:5c:9a:82:bd:85:be:e0:8d:7c:70:6a:6a:ec:d5:
92:52:ca:3f:8b:71:aa:07:16:7a:6b:f6:d4:2d:64:
58:49:66:4b:f7:69:d2:60:48:23:4b:c8:4a:a4:79:
dc:08:d9:61:d0:9f:8b:4b:2d:0b:f7:cd:7e:c9:95:
15:29:3f:fc:ba:af:70:f3:f0:9f:d4:a2:8e:c1:5a:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:75:A5:91:99:5E:FC:1C:FD:A3:D5:15:65:0C:B2:97:5B:F7:EF
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:a9:1f:00:95:a9:f3:fc:7e:12:72:76:7a:f2:ce:0f:99:
85:ad:4c:2b:56:62:19:99:a1:aa:86:03:4a:07:98:c3:66:90:
fc:28:1f:57:ab:46:28:e4:60:d8:51:36:db:4d:c2:fd:d3:07:
77:fb:7b:16:93:b0:4e:23:3c:00:07:1e:02:40:96:6b:24:6d:
4b:a2:c3:80:c5:7a:28:38:24:b5:34:a5:86:39:77:03:a9:e0:
7a:33:52:d6:73:0b:04:0c:f0:ab:2d:09:a3:1a:b9:48:46:cc:
36:c8:c3:24:15:eb:57:36:21:af:a7:0b:2a:37:b5:90:d7:d0:
15:85:7f:f5:a0:f0:07:d5:22:58:da:bf:42:56:bd:0d:8e:05:
24:be:c4:47:62:61:30:82:df:53:89:83:3c:15:20:4b:09:5f:
bf:32:55:24:f4:2d:b8:8d:03:25:22:02:d2:31:86:68:5f:aa:
8e:d6:cc:1e:0e:c6:b6:a6:91:45:15:02:a3:0c:ac:50:04:91:
15:5c:57:08:07:2d:04:6e:ca:11:2d:3a:cd:58:87:d9:b3:55:
f0:9b:89:0a:fb:b6:9f:18:41:19:f4:c9:03:7a:dc:f3:a7:f5:
fa:64:a4:28:7f:ad:dc:18:ff:26:0b:37:e3:03:66:f1:d6:c0:
e0:96:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:37 2025 by rpki-client