Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json)
Hash identifier: 0OAFkR+sfgwGAiBtT/OP8CZmy1LHoq9hx788r5fVAyY=
Subject key identifier: F7:EE:3A:98:C0:91:67:6C:70:36:48:A1:77:58:F1:D1:4C:2E:0F:B1
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 0194BC04DCD7AB14E9EC01819DB8C7117C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=)
2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: 8Ht7ILFbjbI83/qdr0U3tT0ZmqtpS7bq5TJI9rDafto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:d7:ab:14:e9:ec:01:81:9d:b8:c7:11:7c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=f7ee3a98c091676c703648a17758f1d14c2e0fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:87:06:67:5d:f2:7a:f5:12:10:74:47:2d:
48:ee:e0:c2:19:03:5b:9c:f6:e5:08:a5:ad:93:1a:
e8:cc:d8:1f:00:e0:a9:4d:37:7a:98:37:48:53:31:
d3:97:10:bf:a8:1a:a4:48:4a:59:f3:8a:57:03:47:
6e:ed:6f:e5:6b:72:9f:0c:be:92:21:04:56:67:53:
b6:e6:3b:f2:37:9c:7b:37:2d:c8:9a:c5:a1:b4:d9:
61:15:6b:0d:ad:55:6f:39:01:1d:8f:e3:2c:b9:11:
8f:21:d6:ee:73:38:16:ec:ae:b9:9a:95:20:d8:7f:
b9:64:da:3a:1b:eb:fc:19:7c:9b:05:0f:d3:f8:7f:
a7:e0:8e:49:0b:17:31:65:40:8b:87:05:3b:a3:ef:
69:0f:9d:58:84:5a:36:a5:15:10:77:36:62:03:3a:
ca:a2:a6:9f:d2:67:e0:0f:ae:df:9f:a1:89:79:f4:
95:7a:60:1d:ac:0e:47:4b:33:14:47:db:f7:f7:f6:
06:d7:64:15:48:76:79:ad:f5:60:db:ac:d1:a1:3c:
1e:0d:1b:24:a9:3e:66:13:3d:47:05:b5:0d:ea:ad:
2f:29:e7:9f:ca:df:b8:e7:0f:83:ac:a6:10:8b:d8:
bd:fe:86:5f:94:07:06:8a:b3:9e:f7:f0:fe:c6:d8:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EE:3A:98:C0:91:67:6C:70:36:48:A1:77:58:F1:D1:4C:2E:0F:B1
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8a:2a:c8:86:f7:96:f0:6c:f7:6b:99:87:25:8f:73:01:3d:
15:bb:be:1f:fa:ed:d7:1e:cd:84:ed:ef:1a:c0:a6:d7:9e:4b:
f5:ee:f8:04:9c:db:85:9b:ce:54:c9:36:c7:21:63:d6:13:f6:
e4:0d:c2:85:07:fc:89:a0:75:af:9b:e3:7e:b1:a5:6b:83:bb:
05:e6:89:18:74:71:45:bb:e8:ec:1f:8e:18:e3:ce:0c:bc:85:
6e:36:bd:20:0e:60:a2:13:80:bf:9a:b5:b5:27:c8:18:a6:c2:
14:14:cc:70:79:f7:0b:9a:bd:d4:8d:7e:63:8c:77:4e:b0:b9:
62:04:b1:a1:9f:78:8d:69:b3:51:9f:6c:e8:ed:8b:9f:c5:d4:
92:16:a2:9e:96:af:9b:aa:1d:a7:1f:29:ec:5b:1e:12:1c:27:
40:7c:ed:6c:84:76:5b:b0:c3:a4:85:d1:42:38:bc:0d:be:15:
fc:6b:f5:5e:e4:56:eb:fc:98:4e:55:2e:50:3d:f8:69:c5:ca:
e4:28:5e:64:c9:65:70:22:7f:74:72:80:6d:f9:e4:b9:eb:11:
09:0e:cf:d5:03:b4:95:78:45:dd:ef:8e:35:b8:0f:7b:57:a8:
ad:da:f0:66:83:e4:3c:6b:66:d6:d1:a0:5b:e5:6f:68:a1:b5:
f5:19:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:12 2025 by rpki-client