Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: kZTIbzYRmchXTyz57rnUB1LqJ02Vvx8wpL3rz6uy5MY=
Subject key identifier: DC:61:56:78:A9:45:11:9B:D5:DD:A5:52:AC:29:6E:5C:BA:31:7C:F2
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 0194BC72C5246808CE9F9F1CC895CE9D90FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: c4gZT2ZQTyPzEJxuHk2OdCOWm/gcu9MWawiSWKe0yrQ=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c5:24:68:08:ce:9f:9f:1c:c8:95:ce:9d:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=dc615678a945119bd5dda552ac296e5cba317cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:98:e1:06:72:0d:37:c5:da:69:2a:12:44:
7a:b6:8c:63:f4:fd:17:06:00:f7:76:06:01:f2:79:
e2:7c:22:ba:70:eb:35:79:ff:e2:f6:c7:18:d1:f7:
c9:7c:be:44:b1:3a:61:73:61:65:80:1d:4e:08:d3:
47:b8:20:18:84:a8:36:a6:b2:32:26:82:64:9e:d6:
a1:a9:a1:47:08:cd:3d:4d:ec:24:c1:38:82:b9:3b:
28:5d:33:5e:5a:e8:26:81:69:b3:93:0e:67:7c:c5:
61:30:b7:c2:20:7a:40:c8:0e:ff:33:fe:04:fc:27:
3f:88:54:2d:0a:a8:c5:01:5d:1d:1d:2f:cb:3f:9a:
6e:56:aa:31:78:96:f1:20:0c:dd:6d:bb:60:57:dc:
98:37:e8:68:e9:be:6d:4e:a4:37:ce:84:ab:8a:f8:
ae:30:2a:39:2c:b4:cf:23:19:1c:f9:1e:53:4e:73:
08:02:c3:a3:31:2b:a8:4d:9b:d0:77:5e:53:dd:0c:
50:67:5b:92:e1:59:35:e5:00:8f:1e:48:e7:a5:cd:
68:24:98:3a:32:e3:b5:73:a1:02:07:f6:47:de:25:
23:43:a6:9e:43:e6:ea:00:70:49:de:ee:27:f2:09:
58:e2:3b:d7:86:a3:d9:c3:96:b9:f0:78:a5:fd:a2:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:56:78:A9:45:11:9B:D5:DD:A5:52:AC:29:6E:5C:BA:31:7C:F2
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:ca:11:88:1b:24:bb:4a:f4:0b:99:3e:fc:a6:b0:0a:26:
97:88:2e:1e:58:0b:57:a6:03:33:e1:46:25:19:b5:07:89:47:
ec:cf:17:25:06:66:df:2f:e5:0c:43:ec:eb:2f:0b:2d:38:57:
34:9c:31:ac:60:e6:32:c8:94:2c:bd:92:50:0f:b4:35:5f:23:
ab:cb:23:68:9b:b5:21:2b:ab:02:8b:2e:20:1c:8d:8b:1e:65:
8a:78:fe:4a:46:16:a4:29:e7:78:99:55:b9:74:38:ab:8a:f8:
cf:de:dd:7c:35:50:f9:b1:f0:aa:4a:32:40:ea:59:24:70:67:
42:b2:42:d7:bc:43:ec:08:66:27:c1:9f:03:87:25:6e:b2:0d:
17:28:5f:29:23:49:57:6a:b3:5f:e7:d4:02:a0:6d:33:56:97:
56:47:07:0d:dc:cb:b7:d3:77:5d:6b:58:ff:cd:e3:8a:82:dd:
35:bd:a6:84:0e:8f:f4:28:59:d5:41:11:8a:e8:30:e1:95:53:
84:6d:ef:f9:a4:46:a2:9f:53:19:5e:11:fa:ac:af:21:57:86:
b2:4e:7c:8b:c6:02:7f:ff:9b:41:c4:b9:11:bc:bf:28:86:82:
da:cb:74:eb:6e:55:83:c2:8d:92:5b:19:82:b8:f9:dd:7f:72:
f6:c1:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:59 2025 by rpki-client