Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier: eQNjSrQsPJxtFV4InZ2cnTEXtajEOk7XCy1C8dvoVQE=
Subject key identifier: 77:AE:BE:BC:42:04:4E:F6:2D:5E:9D:9D:7C:C7:58:A2:EC:12:DA:98
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 0194BD4EC04479ABD211193A409A3B8701CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number: 0812
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: fMoC/aLAf/dFQhBeUU1CttZADBNvsBSqJtj7RxzXVmM=)
2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c0:44:79:ab:d2:11:19:3a:40:9a:3b:87:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=77aebebc42044ef62d5e9d9d7cc758a2ec12da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:49:cd:3d:c3:25:9d:c4:05:e4:a9:33:d7:
4f:26:a1:44:e5:ce:b7:4f:fe:02:0a:a4:d8:2a:00:
be:0a:ef:9d:97:fc:28:eb:86:d2:1d:ff:a8:95:0e:
89:28:64:98:47:6a:8b:d6:99:0b:c0:a6:04:22:95:
16:97:a7:ec:fc:e5:50:e1:23:13:a8:a8:18:e9:0d:
04:c4:6c:52:aa:c6:91:75:7e:55:59:e4:74:c8:da:
37:99:4c:99:7d:ab:33:f1:00:1b:0e:79:f9:7c:57:
a6:c1:95:b5:87:bd:79:d5:44:a6:b3:8c:c7:f9:6d:
99:78:05:12:a1:b9:74:4e:4c:79:2c:62:32:aa:bc:
44:48:c2:ab:96:ef:6d:c7:d5:10:60:19:c8:7c:68:
57:ee:8d:51:21:21:8f:b7:e0:49:b2:82:23:95:4d:
dc:90:a6:69:7c:38:08:3e:c5:5d:27:19:6a:7e:c3:
a1:e3:c7:48:e2:c6:c0:1e:6c:95:b4:ac:b9:79:66:
fb:65:d2:8a:58:4d:83:94:b7:c2:08:27:ab:18:f1:
b9:5c:e8:db:0d:ea:68:5b:4d:c4:68:68:ba:c7:fc:
ee:e9:64:0f:11:79:0f:c1:aa:c8:5b:52:9f:9c:b0:
d7:a2:30:d3:80:dd:c6:0d:41:7a:23:b0:26:07:d2:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AE:BE:BC:42:04:4E:F6:2D:5E:9D:9D:7C:C7:58:A2:EC:12:DA:98
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0d:cd:4a:43:94:fc:9c:f7:24:6a:e7:cc:8c:45:18:eb:8c:
e2:b4:68:a1:75:f5:1f:b9:83:b0:20:a1:6e:12:d3:f1:de:ea:
25:93:54:f2:7c:ec:dd:fc:0c:46:a6:a9:d4:8e:c0:c9:70:cc:
43:be:f9:77:37:23:89:66:b6:bf:fb:95:0e:64:b5:9a:88:c2:
68:7a:1c:04:4b:d4:5b:9c:62:e3:0d:08:b0:a0:f8:ec:4d:8d:
b4:54:28:06:ac:21:4e:f3:8a:63:ff:68:6d:7b:9e:57:05:19:
f6:72:c8:69:f9:48:5f:6a:39:f2:e9:c0:f2:e5:d2:24:7b:63:
25:54:3e:81:c0:fb:35:11:75:55:d8:73:84:f2:2f:ac:f7:3d:
8c:bb:f3:c2:1f:f4:0c:67:02:65:ce:73:2e:02:bf:88:84:07:
14:3f:8a:16:b1:9e:1a:a4:d0:6b:a8:d1:00:cb:de:42:9b:28:
f2:f4:9b:04:f4:b2:6c:b0:2a:5f:0e:ef:21:eb:dc:3d:1e:6c:
a2:28:a9:0d:67:3e:45:ba:55:83:c2:a9:a8:2f:21:8e:07:72:
e5:18:d0:13:c8:cc:26:9f:94:d8:72:de:8f:28:9e:ca:2b:d7:
eb:73:7b:34:7b:5d:3b:9f:73:11:a3:c0:f2:4c:35:b0:aa:c3:
53:7d:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:34 2025 by rpki-client