Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json)
Hash identifier: cg5+VLsa6EQQWhpP48u00YizGf2jbDXl4qilsohgGVA=
Subject key identifier: 4B:33:3B:5E:DF:D9:AD:33:4F:B9:E8:76:4C:4B:BD:FD:31:A2:6A:3E
Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Certificate serial: 0194BC72B4BD7D1348E1415B4A7A73011595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=)
2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: ksWSVBqoddZNKi7Y4kjs5FreUcopUqtdDkqA5uI3BgM=)
3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:bd:7d:13:48:e1:41:5b:4a:7a:73:01:15:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=4b333b5edfd9ad334fb9e8764c4bbdfd31a26a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:9d:50:e1:56:70:ea:52:05:99:7c:5e:51:
b6:8b:a6:37:5f:5a:0a:da:b8:9c:4b:89:da:fb:de:
f6:a0:9c:38:c2:b6:7f:75:43:9c:3d:87:6d:17:88:
18:d6:b5:1c:73:23:23:66:99:98:2e:df:21:16:f6:
c5:08:54:f5:71:ef:49:a4:cb:c5:66:c3:ee:30:49:
13:22:c3:23:7b:28:0c:0b:80:c1:4b:5a:1d:27:14:
ee:29:c1:5d:8e:f0:f9:4b:35:39:07:38:86:b0:4a:
1f:2e:00:19:7e:de:c4:3c:f6:83:9e:b2:12:9e:a7:
c1:c6:20:f4:d4:ab:bf:26:44:7f:ca:7c:c0:6b:00:
b4:8a:9c:62:87:0e:e3:28:81:bc:ba:46:e2:f2:7a:
50:91:e9:32:f5:d4:3c:21:72:e9:fb:4c:db:f6:01:
5b:8a:f2:fe:fc:76:16:70:b2:4b:a0:86:5c:dc:bc:
cd:5c:d6:f2:fe:f2:32:6a:18:9c:fc:da:76:33:cd:
d2:2d:2d:25:50:87:db:93:11:8e:9e:7f:79:55:04:
33:dc:9d:8e:59:45:e9:dd:b0:00:90:35:42:8b:d4:
66:e6:65:78:6e:51:0f:c5:d3:9a:55:1b:a2:72:d0:
1f:81:2b:66:00:49:21:73:79:12:cc:dd:08:78:c1:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:33:3B:5E:DF:D9:AD:33:4F:B9:E8:76:4C:4B:BD:FD:31:A2:6A:3E
X509v3 Authority Key Identifier:
keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:df:9e:f9:36:16:04:ca:3d:cf:32:5b:c8:5d:a2:57:65:26:
02:74:3a:b1:32:cf:63:b9:53:6b:d7:9b:9b:f8:58:d0:89:0a:
c1:c4:d7:dd:c5:cf:8b:04:53:46:f5:96:f6:b2:93:0c:aa:47:
95:83:62:29:4d:e5:ad:4b:12:46:e4:3f:1d:6c:3f:1a:15:61:
a8:59:96:2c:97:72:99:37:77:e0:74:d0:96:fe:a2:5d:72:f1:
c6:84:16:ad:85:0d:11:c4:3a:31:af:da:31:97:a5:ed:a3:db:
54:e5:b3:c1:a2:06:48:8e:c4:62:7d:51:66:05:5b:6f:cd:f0:
7d:5a:3e:02:2f:f4:62:ba:8b:37:42:e4:96:c4:61:27:4e:13:
33:54:89:61:d9:21:4c:bf:f6:79:ea:17:2c:0e:c0:ce:8d:27:
1c:42:8c:15:3e:20:18:ac:c3:f1:ce:4b:11:02:90:e8:ea:c3:
22:d0:1a:b6:bc:33:d3:17:ec:71:6a:8b:93:c5:12:de:71:18:
4e:57:72:4e:ef:1f:a4:a8:c4:86:b8:27:f0:77:91:6b:ac:78:
b7:e1:f9:62:b9:fd:85:76:26:45:59:37:ad:35:9e:9b:60:2c:
27:d6:f9:8b:2f:b2:74:5f:28:ea:d1:24:7a:66:03:75:e1:f4:
73:7e:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:26 2025 by rpki-client