Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File: 34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier: xBIfSQSqC+h02EG87Rb2h4J58Yed+BmX9heeqoYGdW0=
Subject key identifier: 6A:41:75:27:4D:42:D9:83:B1:35:D1:43:43:5C:55:3E:68:73:6D:8B
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 0194BD8545F2914F0CF6D4C23DA4694C2501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number: 1234
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 1-v8iJMG7kLw-Yc0NKyQwCiTKUnA.roa (hash: 48U7KANlM4mdm3YNX/H5iviEyFzNYK943ewQoT71/5Q=)
2: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: gFQzjOIDGbvIyd2XV/Aeq5CxknX9aosGYZJBcN/QWsg=)
3: GSGxmFMOldMDBn5u7DfvJzXbYCo.roa (hash: un2PEVowSPZIo87TGOOK/KPKdTl+4fijd3wEZf387m4=)
4: dbsBfIyjlvnJeHFT9yt_2dWfazQ.roa (hash: bQniy8nZ8a6zJ0Od+7AKUQSXFo7deYGH7yzxQPJEcPg=)
5: gMAN3v03uAddPu9H4UyvEE9OaL4.roa (hash: wpVmJrhPOGtID7FbjO+SJT/k3IVxP28J+1YCanP25FQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:f2:91:4f:0c:f6:d4:c2:3d:a4:69:4c:25:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=6a4175274d42d983b135d143435c553e68736d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:19:f6:38:f4:5b:01:0b:aa:12:03:01:53:
c1:67:3a:ce:d7:b1:76:05:21:b3:0c:57:35:18:eb:
04:99:45:ca:6e:55:da:b8:d4:0c:0d:02:d0:e4:bf:
3a:d6:13:95:04:1d:64:21:e7:4c:c6:b4:00:5f:16:
af:bf:24:cc:bb:db:9f:b7:36:d0:6f:34:3c:7f:3e:
c9:11:d8:21:f4:6d:91:45:09:1c:c5:e4:10:13:61:
c0:5b:eb:31:94:2a:dc:d2:07:c3:1b:63:2e:60:2d:
0c:b2:31:7f:1c:c2:91:8b:b4:34:07:5e:17:47:35:
c9:7d:6b:d6:58:db:81:ba:59:9e:4b:4d:fc:70:bc:
8e:49:c0:66:b3:be:f1:de:4a:7f:92:a5:6c:46:4f:
1f:fc:59:3c:8e:34:c6:f8:a3:2b:a1:e5:24:53:9e:
d7:95:81:76:a5:19:1d:e5:ae:81:6c:6f:5d:b6:74:
ac:36:c1:35:e6:b3:b4:bf:b8:bf:bc:3a:f6:c8:d8:
2d:8d:02:32:50:66:a2:64:ef:e6:f4:66:a2:84:63:
cf:83:6c:05:71:e5:6d:a7:ca:7e:3e:5d:9e:16:f2:
57:c8:ae:4e:58:b1:8e:08:37:2d:4e:c2:fa:9f:44:
c7:f6:68:ab:29:8a:c1:51:c1:cc:cc:24:62:88:f2:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:75:27:4D:42:D9:83:B1:35:D1:43:43:5C:55:3E:68:73:6D:8B
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:60:90:b2:57:3e:ca:cb:9f:62:f6:e0:10:1f:93:c1:a7:
28:63:f3:6a:f7:0c:94:89:5f:10:26:cd:5b:90:08:59:8d:da:
39:9b:4f:69:eb:ba:de:e4:b0:7f:6c:ab:52:48:27:2d:cb:93:
bd:6f:76:eb:63:8c:12:fe:4c:57:71:b1:17:e8:96:7d:3e:64:
7a:05:f1:11:68:e5:05:2c:76:27:db:dd:31:de:3e:6c:d7:b2:
90:49:f9:99:30:e2:c8:df:bd:a1:08:37:ab:d6:56:77:e4:5a:
b9:4e:21:a3:5d:28:1e:bb:cc:a0:6b:aa:79:93:bb:ef:58:61:
c7:49:a2:b3:da:77:bc:66:a6:44:7c:27:3d:b4:d3:ee:c3:e1:
4d:45:29:66:15:e1:90:0a:92:53:5c:3b:d8:65:dc:30:91:04:
55:9f:cf:80:97:75:51:46:4a:ad:a6:1f:38:1a:7e:e1:92:1a:
8c:c8:ec:cd:47:d6:73:eb:95:f5:d1:19:5c:ec:69:a6:d3:57:
9b:c6:9b:a9:67:7f:02:9b:6c:bb:d5:59:20:3b:da:07:a1:6b:
71:16:8a:b2:74:8e:20:1d:84:46:3f:85:0b:f0:06:85:38:70:
08:63:61:64:81:80:35:3e:9a:3c:75:a4:b8:ee:02:3c:37:2f:
77:f2:84:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:40 2025 by rpki-client