Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: FqP0U7KEM7p9rRx8qlqLAwG1g/D89YLFeSgCswukAUQ=
Subject key identifier: 76:E9:50:FD:93:B2:BC:17:5C:B7:CD:64:A7:A5:0F:BB:E6:43:C4:D1
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 0194BCAA456BE99E7C79980A3A8965A46B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: fdcKoDXtvfUd/CJ9KDliMM3XfEh8Zgyz1ckG+9ATsT0=)
2: qM88UnBEO7hJIOXTGn5mpC9drZ4.roa (hash: Zjl7M5YF5NfW5doz7UZ6OWeeqYFMW7XiaZIij5TEofI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:45:6b:e9:9e:7c:79:98:0a:3a:89:65:a4:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=76e950fd93b2bc175cb7cd64a7a50fbbe643c4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:94:33:bd:b1:df:69:d9:b3:76:ae:d8:1d:
97:89:aa:e4:3a:96:10:62:50:c1:30:53:35:59:85:
5f:8f:e3:6f:dc:8f:a1:66:ad:82:e5:1c:9c:81:00:
a7:3f:3b:fe:4e:b5:47:eb:31:81:d0:27:78:46:bc:
fe:d7:1d:24:15:a1:99:97:2a:f4:e5:67:71:66:3c:
13:fa:82:1d:12:31:81:58:3a:81:d3:34:2c:88:2b:
22:ec:c8:ec:e3:20:1d:d3:12:3f:36:2b:97:5e:36:
91:31:ae:97:39:4d:a2:e8:d2:c5:ec:d9:3e:4a:af:
5e:38:e3:c0:eb:93:cf:64:8c:43:72:70:64:89:0d:
ad:05:21:ef:73:10:e2:ce:14:75:0f:31:aa:8c:31:
94:34:cd:76:f9:f9:55:aa:70:9b:a5:1f:77:24:a3:
be:76:11:a6:12:07:f5:f7:60:e1:0e:54:41:86:27:
ec:c7:d4:83:66:bd:b0:0d:d5:be:ad:74:ee:58:4a:
63:04:82:1d:e5:3f:4f:61:f7:13:3e:69:3e:38:ea:
5c:fd:0f:6f:0b:23:85:46:3c:10:bd:a4:60:c8:f6:
c9:c9:09:5c:59:19:fe:55:2b:a2:2a:9b:eb:d4:63:
a9:2a:21:f8:0e:42:bd:29:8d:c6:80:03:5f:21:6a:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:50:FD:93:B2:BC:17:5C:B7:CD:64:A7:A5:0F:BB:E6:43:C4:D1
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b5:0d:cc:08:e8:00:49:a7:54:bd:57:02:af:cb:ee:a5:c9:
f8:97:8f:85:3a:88:93:91:b1:ac:0d:bd:46:e9:71:20:26:2f:
81:68:bd:3f:eb:ae:5a:6f:4f:87:4e:d6:4f:12:24:78:ac:25:
27:ff:0f:e1:e5:01:dd:fe:64:d3:82:58:54:29:e9:b6:1c:ee:
f6:cd:3d:d6:23:48:ad:7b:64:7c:5c:01:c7:d7:c8:41:cc:8d:
37:d5:e8:c8:d6:c6:69:f9:3f:87:f2:e0:96:93:c2:9e:e5:35:
ae:f2:c6:9f:36:70:65:5d:bd:99:d2:fc:17:67:0b:e6:09:f1:
50:53:c5:72:06:d2:6b:bd:d4:4e:21:56:e6:51:90:8a:38:4f:
db:c3:b4:d8:0c:54:0f:9a:25:7a:31:22:cd:2c:12:3c:d5:20:
d4:0d:0d:d7:84:6c:ad:aa:46:ea:57:bd:df:07:23:20:9f:85:
4e:b6:5c:ed:3f:52:eb:30:7b:52:e2:31:ec:13:0d:08:bf:47:
36:65:1b:f6:59:ba:73:11:bf:6f:23:39:6b:d3:e1:f5:03:93:
42:dd:57:8a:6f:be:c7:8e:38:3a:85:1d:5f:1a:4f:38:09:3f:
d1:12:fa:c9:ef:ad:f5:ce:2d:8d:a9:87:be:51:77:15:9a:c3:
f6:3a:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client