Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier: Oz/l3gmGeFCT2cc9WBbofgyxiB3+IOkq4+okHlAnw88=
Subject key identifier: 5D:66:BA:7E:EB:B0:80:B2:CD:18:D5:FC:17:42:0D:FD:68:81:22:05
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial: 0194BC73038D5F93C3303296D6DB0B8C61FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number: 12F3
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: T7rYaa2xRJpBwlGS/toaDCgJfoV6T+MTlmqntIO1MKI=)
2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:8d:5f:93:c3:30:32:96:d6:db:0b:8c:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=5d66ba7eebb080b2cd18d5fc17420dfd68812205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:c2:8b:1e:da:83:86:04:79:23:1f:b7:32:
b0:cf:9d:8f:69:b4:7b:9c:71:95:af:d4:d2:5b:e9:
95:dd:66:f2:6b:62:5e:da:6c:c7:79:3e:07:59:eb:
aa:65:66:a7:3a:f3:20:c4:58:84:e6:85:57:dd:08:
f0:0b:65:59:f0:87:e2:b8:53:14:60:19:07:75:57:
8d:6d:7f:eb:52:be:b5:ec:d4:9b:01:1d:8a:73:eb:
50:f5:e4:97:39:72:5e:32:24:c9:e9:eb:4e:07:6f:
88:3f:2b:c9:2d:bb:8f:73:15:43:bb:2c:25:5c:73:
85:2c:82:98:bf:e9:f2:12:a1:08:56:7b:d6:31:41:
6d:39:4b:f4:bc:f0:67:5c:83:55:ad:77:26:48:4b:
90:17:c8:dd:85:7f:67:20:3b:78:d6:04:ba:78:39:
e3:61:bf:4f:48:d1:52:72:ee:93:30:d7:45:c8:8a:
cf:df:de:e6:f7:61:65:cf:46:42:74:de:2f:59:c1:
d5:e1:aa:4e:43:71:b2:05:48:fc:77:3a:97:dd:97:
d9:7d:95:e0:b2:1d:9a:30:4a:21:66:fb:27:ec:8f:
2a:be:a6:8c:0a:ec:f0:5a:b8:1d:8c:87:13:ef:6f:
d4:3d:67:22:f2:58:7c:f1:4b:25:8c:77:4d:b9:04:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:BA:7E:EB:B0:80:B2:CD:18:D5:FC:17:42:0D:FD:68:81:22:05
X509v3 Authority Key Identifier:
keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:bb:f3:d6:e6:50:17:1f:78:43:fd:b1:cb:76:7c:1d:d8:
02:6e:54:4e:30:e8:82:b0:91:78:8b:9a:e8:ac:f4:e2:dc:c1:
c4:c6:7e:04:96:70:d3:ed:86:48:e3:40:0f:ea:db:21:6b:c6:
3c:e1:99:85:fd:06:30:c0:8d:d6:45:b5:e8:30:d9:24:a0:a8:
69:ef:fd:35:b4:17:19:2f:d7:d0:96:08:c5:90:d8:43:e2:3d:
ac:22:f5:e1:ff:e8:e6:3d:28:9a:d6:8e:8c:71:27:b1:7d:69:
df:01:10:b5:63:2e:20:26:04:64:78:88:2e:fb:33:7b:57:9d:
8f:31:e2:30:65:b8:d6:82:f9:72:87:75:2c:de:56:87:ab:51:
6f:c4:ca:1a:b2:2a:84:b2:71:75:db:4a:7e:58:d4:4b:dd:06:
d2:34:15:9d:a3:49:bb:70:5c:8f:4f:fd:e2:68:ac:92:1b:03:
a1:67:4f:9b:8e:ab:9c:11:dd:2a:cc:6f:32:e4:8b:8b:a8:8f:
a9:38:e3:ab:71:eb:6f:bd:17:dc:c2:cd:f7:39:3f:60:8e:39:
e2:51:9d:8a:50:c8:b3:4a:0a:ad:33:b9:47:64:b2:2f:69:57:
b5:99:db:32:0a:73:97:ff:fe:6a:cc:7c:f7:9e:e8:ba:e0:f2:
3a:3f:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:07 2025 by rpki-client