Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: sBunAy2zFpmje82uIr11ZXrgsVA1OWqeA0s8auFsKLE=
Subject key identifier: 8D:EF:93:7A:0C:07:B0:23:44:7B:18:9B:3D:EC:08:B0:C5:91:98:78
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0194BC3C688B2A7DF6A8E5B454FD2231A613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: 6Kb9i7st0eSBXaor5yJkaSB/elou9/5E3WQhaxxx23w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:8b:2a:7d:f6:a8:e5:b4:54:fd:22:31:a6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=8def937a0c07b023447b189b3dec08b0c5919878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:5f:43:1c:2f:b6:af:51:d3:8d:dd:b8:6a:
75:ef:15:3b:c2:68:07:5e:5b:1f:32:59:a7:c7:0e:
09:30:98:a7:d6:49:48:bd:9a:17:18:e3:24:6e:81:
8b:be:0a:d5:cc:ff:ee:23:0f:48:aa:93:7d:f8:3c:
29:37:d7:5a:ba:1d:91:88:2b:40:73:3c:35:3b:0e:
08:ac:97:de:f9:fb:ae:80:fc:06:fd:eb:ce:c3:01:
17:d7:51:53:9a:d8:5a:b4:c1:35:bb:8a:e9:90:eb:
96:b7:62:0c:4b:52:6d:28:b4:8c:5d:bd:4b:5d:b5:
ae:03:06:ef:9c:4f:f0:88:50:0d:b6:cc:bd:3a:9a:
eb:90:01:98:05:14:3e:ed:51:bc:f1:c0:b0:51:30:
67:f1:d9:4b:d4:53:78:f0:6f:c7:2f:a8:a1:b7:0d:
97:a4:87:8d:46:ce:81:61:e5:00:dc:c4:de:92:d1:
62:bf:8d:ee:1a:7d:49:d8:88:79:d2:5b:bc:cc:7f:
84:d7:2c:f8:d1:0c:7c:67:ff:8d:e3:bf:6b:f8:6e:
b9:41:b5:b8:72:5c:ee:1d:19:29:b6:04:f7:58:98:
28:42:9a:49:2c:75:b0:8c:46:fe:37:7f:e1:00:0b:
b5:5b:b8:31:cc:da:30:1f:59:1a:81:d9:5d:d6:3d:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:93:7A:0C:07:B0:23:44:7B:18:9B:3D:EC:08:B0:C5:91:98:78
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a4:cc:51:65:19:4a:64:44:9a:8b:76:16:02:b4:23:be:15:
83:85:30:51:b0:25:40:94:fe:2b:11:55:df:eb:9f:0c:49:9a:
80:a9:5a:de:8d:f0:a9:e1:8d:1e:62:39:6e:a6:e7:58:3a:a0:
bc:eb:89:0c:a1:ae:b5:ab:d1:8d:68:44:dd:73:87:87:ad:84:
97:5f:d4:3f:bb:2d:5e:64:5e:6d:30:4e:94:07:8f:7a:fa:95:
18:41:b0:00:a9:c7:6d:27:27:34:5d:aa:60:76:60:36:fd:33:
3d:ae:9b:33:dd:f2:6c:d0:fa:c1:d9:e9:98:cc:c5:48:55:de:
bf:13:b0:9a:fd:a0:88:dc:cc:30:30:0e:de:5b:1c:26:b3:7a:
2a:9d:92:3b:d0:38:a7:1e:46:b8:19:d1:3f:46:e9:ce:ad:12:
09:0e:4a:43:2e:85:10:95:20:de:33:df:dc:95:7c:8a:fb:40:
ca:b5:af:1b:79:1f:8f:04:c7:e3:3e:e0:92:00:42:f4:d3:8f:
ba:cf:82:87:43:b6:86:55:47:d0:18:ec:a3:1e:37:66:b3:99:
0e:a0:79:33:36:e2:5a:ed:57:6f:b7:e2:6b:da:60:be:aa:cc:
c9:fd:e9:2b:30:9a:f2:43:26:ad:3e:77:4f:6c:a2:4e:99:95:
03:9f:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:48 2025 by rpki-client