Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: IDGOWc0TwUZ92Vr5pgz8dfEQK3sQqOLu9ftBDpiJ76o=
Subject key identifier: AC:15:3F:FE:08:7B:96:EA:65:94:F7:42:96:79:0E:EA:4F:C7:88:71
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 0194BBCEA0D5E57016325B9749DE41331F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: AcQQ1kSjNAB+4IXdFxrvcFFFRc1IuKlPtXFqX4y9fF8=)
2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a0:d5:e5:70:16:32:5b:97:49:de:41:33:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=ac153ffe087b96ea6594f74296790eea4fc78871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:7a:5b:1b:99:45:d2:be:8e:f5:55:dc:00:
46:46:b8:40:c7:cc:70:38:7c:97:a8:7f:ab:cc:bf:
d6:fa:57:18:75:98:a6:d7:7d:73:4f:db:a5:e7:66:
a1:8d:4b:88:68:58:49:03:a1:a6:74:b0:41:98:c2:
38:37:21:d6:fc:d1:88:ba:a3:a8:11:d1:62:7c:31:
e8:57:3c:ef:87:d7:5b:06:93:e5:73:2d:97:e7:e1:
df:5e:cd:7b:fc:09:0e:db:a1:88:08:25:b7:75:e4:
99:64:d0:a4:d8:cc:59:55:64:ed:ee:20:0c:09:34:
73:46:23:c7:fe:ce:2f:c3:e9:1f:0c:6d:e0:7f:13:
90:64:9b:5b:d0:d8:19:5b:43:e7:43:3e:82:a5:18:
4e:07:0b:bb:d9:33:7e:e2:21:c9:b0:16:83:53:b2:
02:c9:87:d7:f8:51:fb:7c:e1:64:e1:b3:cc:7b:1f:
08:15:ad:95:2f:47:8b:f7:db:3c:3c:a0:54:f9:f1:
87:48:df:bb:24:a7:fa:dc:f2:7d:1f:7a:d2:78:7f:
d1:dd:d1:fe:1b:e0:dc:c6:1d:7f:6d:d8:6b:40:d2:
fe:1a:0b:f4:8c:26:61:8c:49:a9:e5:4d:c9:c2:5e:
7d:bb:ee:da:d6:98:e1:f5:b5:45:6c:cd:2d:f2:20:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:3F:FE:08:7B:96:EA:65:94:F7:42:96:79:0E:EA:4F:C7:88:71
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:1f:0e:60:24:4c:86:f0:4a:0c:9d:c6:62:19:36:52:07:
c7:89:4c:c3:c2:90:2c:cb:3f:82:8c:23:7d:28:8a:47:31:b3:
52:0b:c7:ab:3c:84:1f:72:41:d2:93:8a:e5:27:b9:00:0c:d4:
ae:2f:ba:19:88:d9:6a:eb:e6:9a:57:b7:66:29:1f:e4:fa:e8:
27:9d:47:67:1d:0e:b1:c2:d6:ec:fa:c2:55:e2:7f:8c:77:a3:
9e:20:f4:5a:c2:95:30:e6:1b:a0:f8:3d:cf:2a:64:af:2d:83:
26:c4:60:0a:ae:fc:d4:3e:d9:7e:69:3e:59:d7:60:d4:15:c3:
fe:01:a7:31:f9:14:13:ab:5b:c9:2f:d8:47:93:58:8d:74:fd:
e5:3e:f2:4b:14:ea:88:85:c8:76:61:57:c3:f5:64:78:44:f7:
a1:a4:e9:bb:33:39:40:fc:d2:9a:48:5f:45:a5:66:47:2d:c7:
cb:dd:38:e5:9d:d9:5c:92:a1:fc:87:6c:52:9e:40:37:0a:70:
d3:4f:d7:95:e8:8c:2f:61:f7:b7:aa:6b:81:5d:09:5a:e6:36:
f5:52:fa:45:c7:54:c6:6c:f4:77:e1:e8:02:f0:d0:dd:8b:82:
68:bc:ba:57:f2:83:bd:1f:2c:f6:62:56:c6:1f:2a:e0:da:fa:
8c:99:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:49 2025 by rpki-client