Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier: ajd+fzwn+yDXyINyar44v7qY4pNCBFtedA1OPyXbpb8=
Subject key identifier: 30:55:7E:21:19:6A:D5:30:1F:43:33:06:3B:03:A8:42:B1:6B:0B:57
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial: 0194BD4E5DE1BBE96E01CF6F25DBEA4CCB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number: 0D21
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: 358mMmrqfFMh8SdrHQZ8jgw2JxpRNsUSxD4RD7a39qY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:e1:bb:e9:6e:01:cf:6f:25:db:ea:4c:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=30557e21196ad5301f4333063b03a842b16b0b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:ff:80:76:44:be:c7:72:dc:5d:99:3a:e5:
64:3d:56:69:47:ac:59:c1:82:06:83:db:e1:54:44:
4f:73:17:c6:53:74:40:82:81:b5:4e:34:7a:f4:15:
b1:63:d4:8c:5d:12:1d:bc:fc:73:2a:ab:d0:45:4d:
cd:9b:92:73:37:e0:74:a1:b5:bd:3e:70:d7:01:a3:
ca:79:84:2b:b5:0a:41:a7:cd:78:5d:af:57:8a:76:
06:f2:63:b3:56:22:2b:0c:12:db:e3:c8:34:41:7f:
c0:43:a2:cf:d3:e9:ed:4b:1d:02:e9:df:6d:32:21:
7e:73:fd:8b:66:5e:77:c5:7b:b7:01:11:b9:5d:cf:
90:fb:8f:4c:06:19:ef:d1:dd:dd:1e:cc:09:fb:31:
6d:ef:9a:be:a5:e2:ed:29:fb:6e:57:24:b3:de:82:
d7:e5:97:e9:5f:e8:cb:20:ac:bc:96:61:5d:af:67:
88:09:7f:f8:5d:c9:c9:4e:fa:27:e5:72:e9:53:4d:
63:f3:07:fc:6a:97:85:a4:37:a3:74:b3:61:88:80:
f4:f0:dd:96:dc:f3:71:f4:d1:36:a0:3c:63:a6:d6:
f3:99:95:ed:57:c4:42:68:0c:7a:64:fc:03:89:9e:
7e:b8:d6:ac:c3:9f:be:2c:5f:61:36:6e:23:66:54:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:55:7E:21:19:6A:D5:30:1F:43:33:06:3B:03:A8:42:B1:6B:0B:57
X509v3 Authority Key Identifier:
keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:55:a6:e5:25:24:ed:a4:c1:76:03:5b:a3:dd:59:fe:21:19:
96:0a:10:d1:0f:53:f5:2e:cf:ba:7f:8f:ff:a8:04:13:7c:09:
08:8f:73:8d:40:06:1e:ad:f8:d2:62:e9:a7:25:d3:cb:f9:d4:
dc:7d:2c:48:5b:cd:77:cb:c2:5a:d3:22:3c:d0:54:2d:1c:5c:
d3:7d:02:ab:93:0e:ac:2f:4d:ac:3e:a2:97:0d:dc:88:e9:75:
58:1a:26:af:e9:b2:1c:12:96:fa:4a:75:cc:58:47:7e:38:8b:
30:77:08:82:93:99:40:f1:e0:b1:76:81:58:93:b4:6a:c9:48:
72:ed:e4:80:4f:aa:04:e1:8c:f2:41:a3:7b:a2:97:69:28:27:
32:fe:94:35:21:e2:22:f7:3c:0f:11:af:ff:16:29:a2:c7:3b:
6d:8f:f2:fc:67:18:ed:0c:69:1c:33:92:b5:81:3f:9d:0f:aa:
39:c1:8f:4f:1b:d6:5a:81:7f:fc:d6:12:f1:64:de:4f:02:f7:
06:93:dc:bd:86:7b:0f:8d:87:a3:6b:d0:37:d5:14:9e:8a:1f:
61:99:12:6d:67:41:8a:e5:5f:e6:22:0c:55:bf:e1:83:29:44:
9d:49:4d:cf:d3:0a:65:bd:f4:3a:f1:ad:5a:30:e8:35:63:99:
ad:ef:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:17 2025 by rpki-client