Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
File: 63ZBEa7_qGvR7DyohbY95_VlD24.mft (raw, json)
Hash identifier: WvCw3S2+zbR50XfHEzdZGg3UrFAVpMkP7U8fF17xIEw=
Subject key identifier: BD:7D:BD:B3:19:65:21:19:F1:14:25:AF:62:A1:F5:19:63:9A:0B:72
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial: 0194BBCEA4863D5E44BEC020D706FF21915D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
Manifest number: 08B6
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: 63ZBEa7_qGvR7DyohbY95_VlD24.crl (hash: rOQQcM3C2t6Iys8c8oEPNlQJSJH2fVDGEbYSThchWYI=)
2: DoCQ0WPbgwcXZ4qLqyGmmLKcBIU.roa (hash: LDl36XNVECsld58k0VIf2xAj0pQ9aqDkf1O/p+KSfsg=)
3: f31JM5R62FkZoMTgS5ZW91aPR_M.roa (hash: QVIqQ/SGAQ5wpWVY00S0uRTQWsOXv08QV+Inv0hjrjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a4:86:3d:5e:44:be:c0:20:d7:06:ff:21:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=bd7dbdb319652119f11425af62a1f519639a0b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:cc:d9:a1:3c:db:d3:eb:65:bc:3d:22:e1:
f3:7e:25:bc:76:4c:ac:25:f2:c4:3f:75:8a:ee:c2:
94:da:a6:d9:a7:9e:23:a6:5a:06:e8:27:61:f8:56:
c4:91:94:1d:73:26:af:b8:32:2b:2c:3e:7e:03:b4:
26:60:ae:32:84:92:62:d1:6f:54:a1:4f:bd:0c:12:
b0:a5:fa:32:2e:3d:c6:1f:e7:91:af:ec:cd:13:fb:
fd:43:1c:f9:9f:26:77:31:a8:76:9e:82:aa:ca:cd:
30:42:b6:38:26:08:c7:6a:5e:a3:7e:85:f0:b2:49:
9f:b1:b1:8b:c6:48:e2:a6:e3:4e:a6:e6:36:2e:b1:
10:fa:0c:cc:35:17:13:f1:2d:b9:72:e2:a6:20:37:
94:20:e3:98:79:9e:d6:5f:ed:d4:77:8e:c5:ea:cb:
6e:c5:05:8a:94:ee:44:6a:03:c6:52:6c:fa:44:af:
70:24:53:18:5c:e3:d5:19:88:ec:b1:a3:94:59:b7:
24:e2:d6:49:a5:a6:4a:78:9b:28:d6:4e:47:3b:01:
86:4d:66:de:82:cd:92:56:23:94:41:9a:ac:2a:f8:
39:05:80:48:d1:f6:a0:fb:d4:8b:98:3c:f6:62:fa:
94:f6:b1:0e:2b:ae:3e:4a:dc:ce:07:7b:fb:76:98:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:BD:B3:19:65:21:19:F1:14:25:AF:62:A1:F5:19:63:9A:0B:72
X509v3 Authority Key Identifier:
keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ad:9d:a0:78:4a:df:9d:26:1d:d9:8b:da:25:85:f9:02:3f:
96:1d:5e:99:fd:02:d7:d5:c5:0c:4c:6a:b3:c1:2c:8e:ed:ed:
52:da:9b:30:b4:41:b5:03:0e:a2:ea:90:2b:67:88:ed:6c:7c:
79:11:c4:81:de:c2:b2:dd:7c:a2:34:8f:dd:08:61:56:77:0e:
c9:a5:b7:61:10:8d:7a:6c:39:8e:52:f8:03:c6:51:f6:ab:56:
1b:52:d1:39:95:38:75:b4:7b:30:26:90:78:88:35:4d:b6:16:
4b:a5:3a:a8:24:6e:9f:f5:4c:4d:6e:40:a8:d3:fb:ee:02:09:
b3:83:c9:55:1e:9a:96:f8:6c:f3:e3:53:e8:64:e8:5a:4a:da:
74:79:3a:2f:59:4a:9d:bc:e4:02:cd:49:8a:3c:fb:09:ed:b8:
25:00:69:67:0e:fe:49:64:10:58:e0:4d:f2:c9:2f:98:fd:b3:
1e:b7:09:59:e7:4c:55:73:6f:1c:f4:d5:48:ef:a1:02:86:81:
3d:4d:94:e2:75:6b:10:c1:9a:aa:fb:c3:e1:56:2f:a1:60:9c:
e0:4b:f5:98:83:66:96:19:6c:d3:56:60:6b:9a:a5:b8:6d:01:
20:d5:94:0b:8b:68:f4:68:d8:48:0c:ff:1c:08:83:4f:52:0a:
19:dd:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:23 2025 by rpki-client