Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier: J6rwmECP8pIzlZxXCfc62HiA6mMQweYBfwAC6TLfW9A=
Subject key identifier: EC:70:39:6B:1A:0E:8C:7D:D0:94:7B:08:D6:55:59:E7:FD:84:1E:25
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 0194BC72C6A732A204EED176B49D21C700CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number: 06CC
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=)
2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: /NbHLXcJLSkIGTtZC5j6apFtcvnjzdsjfzud3uJuXb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:a7:32:a2:04:ee:d1:76:b4:9d:21:c7:00:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=ec70396b1a0e8c7dd0947b08d65559e7fd841e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:74:a9:99:c7:7f:c2:56:2d:a5:8f:14:bc:4c:
ec:91:ac:84:64:e1:ec:5f:b8:1d:33:7a:d3:e1:9e:
06:3e:80:71:18:7d:3a:04:02:cc:93:eb:e7:0b:90:
1d:fa:4b:de:22:80:76:6a:40:7f:d7:4b:6d:5b:d2:
7f:d9:b9:20:93:64:d0:a4:98:e5:01:b0:7d:9e:b9:
ac:55:a4:90:d7:79:03:98:b4:12:c9:e5:65:f8:40:
d0:51:82:0b:58:bd:81:46:c8:a0:6b:82:25:78:00:
8b:b9:56:74:b6:48:8a:1e:20:67:91:b8:dc:8a:d3:
89:b2:fa:5a:3f:23:92:fc:68:82:68:6f:83:59:ba:
79:33:92:da:89:ab:46:50:8a:5a:90:88:eb:c1:51:
ec:18:a3:15:b5:63:1f:b7:07:0a:f6:57:22:35:f3:
3d:9f:ee:02:a1:74:9a:c0:9f:21:89:1b:74:17:bc:
6b:66:bb:df:2a:d4:4c:6a:83:c1:9a:ac:59:77:6b:
75:14:2a:e6:76:7c:62:13:0a:0b:83:d7:be:05:d3:
65:01:ca:7e:8f:99:41:12:20:72:54:ba:b9:cd:7d:
e2:95:21:c6:4a:a3:c5:14:74:d7:cb:6a:64:9a:9d:
f5:2a:46:cc:9a:c2:31:aa:db:ff:30:89:64:d7:49:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:39:6B:1A:0E:8C:7D:D0:94:7B:08:D6:55:59:E7:FD:84:1E:25
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:18:e5:6a:11:31:16:91:52:b2:e2:95:17:1f:aa:6e:13:
46:6f:ae:80:b7:47:b5:eb:6c:c0:29:35:fc:5b:43:09:20:9f:
ce:3d:c8:e4:f8:63:4d:20:ca:3b:79:b1:b0:59:2a:90:bf:5b:
93:f8:d5:1c:1e:d8:49:53:f9:61:c4:c3:b1:62:07:7d:51:ff:
11:a7:62:f3:2a:85:3d:00:83:bc:68:ac:26:bf:7c:0d:12:f9:
57:ed:b8:4d:f7:e5:72:1e:86:f5:a4:59:e1:5e:53:6c:0c:c6:
da:4d:cd:9b:f3:f1:a5:12:02:ba:d6:7a:7d:f6:2f:96:e1:56:
7b:82:89:fc:e8:4a:b9:38:f8:38:e4:c7:46:1f:c9:54:49:96:
dd:5a:c1:4f:16:57:c7:cb:b9:67:93:92:2f:79:92:67:84:76:
fe:4c:15:cf:3e:d2:d7:3e:55:dc:91:51:2b:4b:4d:2d:0a:b4:
31:68:44:1f:f9:11:b5:a6:28:ee:70:db:fc:11:f0:9b:93:ac:
eb:25:67:fb:c3:52:97:f4:b1:14:9e:a4:a9:cf:b1:ad:e6:10:
de:e9:fd:78:39:8e:07:b1:5b:a4:b7:46:db:03:71:cc:e2:7a:
dd:e6:1e:45:33:8d:81:cd:01:61:b6:84:77:f7:65:3a:89:87:
09:a4:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:58 2025 by rpki-client