Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
File: e20oQEBEI571gkLyEOCxZmfrQNA.mft (raw, json)
Hash identifier: Oz6pBJhQ8M4IuSJaZJYXFWmONcDyyV/RNBb0psK+mxs=
Subject key identifier: B0:83:63:E4:1B:D9:B6:3B:B1:B8:48:53:04:24:B1:7C:F9:F3:8A:81
Authority key identifier: 7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
Certificate issuer: /CN=7b6d28404044239ef58242f210e0b16667eb40d0
Certificate serial: 0194BC3C7F3FD1CFF4AE41874B51D6F45696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: e20oQEBEI571gkLyEOCxZmfrQNA.crl (hash: CSapPO0jhN2JttP+Zu7Of30UXsex8qGbJdOeNM/y0xc=)
2: hlbCnpGhMRluMY_1waDMmeV9vY4.roa (hash: KZsIHpuRlGx7ybmtLKdiNmONLiSIwlKsEPr24QJ/98Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:3f:d1:cf:f4:ae:41:87:4b:51:d6:f4:56:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b6d28404044239ef58242f210e0b16667eb40d0
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=b08363e41bd9b63bb1b848530424b17cf9f38a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:16:b9:ff:4d:80:cd:52:5b:5f:37:04:7f:
54:25:ca:4c:70:b2:ba:42:88:6f:06:bd:a0:67:91:
4f:25:3d:0c:5a:03:fa:5f:88:70:1f:e9:d2:55:22:
cd:0e:56:d4:da:b6:e1:da:01:06:9e:85:73:df:d3:
2c:3e:32:72:f6:b0:f8:1a:5a:55:46:06:1c:06:9b:
39:02:d5:bd:54:08:b1:84:79:69:e3:fc:c0:75:fe:
5e:81:fe:fd:0e:04:20:4d:9f:9d:77:4a:48:9c:7c:
70:20:c2:01:0a:95:53:49:8c:62:48:5a:3e:7a:96:
91:b5:c9:87:67:6d:4d:38:c7:92:9e:db:1c:75:32:
4b:e8:e2:4e:99:2d:1f:a9:ce:67:d6:a9:93:8e:f9:
ce:c2:5f:d3:93:cb:81:0e:24:9e:3f:52:45:60:80:
35:20:99:7f:d1:26:9d:30:4a:43:e6:f4:87:99:08:
94:98:f5:63:6d:c8:55:76:7c:1b:ba:17:7d:59:31:
48:fa:d6:cb:d8:ac:32:b8:c2:70:fc:b6:00:79:8f:
b7:fd:8c:0f:a5:ae:53:ea:40:81:f4:00:de:bc:22:
74:54:c6:32:aa:f3:de:13:f9:3f:0d:a3:c7:c3:cc:
01:61:3a:e5:c6:ce:35:11:27:44:32:34:ee:a0:33:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:63:E4:1B:D9:B6:3B:B1:B8:48:53:04:24:B1:7C:F9:F3:8A:81
X509v3 Authority Key Identifier:
keyid:7B:6D:28:40:40:44:23:9E:F5:82:42:F2:10:E0:B1:66:67:EB:40:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e20oQEBEI571gkLyEOCxZmfrQNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/e20oQEBEI571gkLyEOCxZmfrQNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:32:c9:07:22:cb:5c:85:f3:c1:ac:ee:01:97:78:19:ee:b6:
3f:24:1f:4d:27:11:60:76:8a:00:87:28:6b:80:a7:a6:47:89:
2e:9b:c7:9e:60:52:dd:7e:55:5b:a7:e1:7c:a0:70:ba:63:b0:
e1:8f:9b:13:1f:fa:af:89:dc:1d:cf:32:32:0a:e3:ef:f8:13:
27:7a:24:c9:24:45:b3:31:f7:ac:cf:2e:b3:f6:30:e5:d2:3b:
75:b8:b5:83:30:d7:87:2d:3b:0f:cb:de:9c:92:00:24:8f:35:
ad:45:fe:94:7b:0b:91:f6:d1:58:fb:27:98:cd:ca:ea:8e:92:
77:da:19:41:97:25:81:46:3e:3e:4f:04:b3:14:db:94:7b:d9:
98:22:77:f9:10:f2:18:2d:5c:ac:2c:d9:80:1b:78:dc:d5:a0:
57:65:5e:8d:4f:d2:a2:aa:a5:7f:9f:c3:34:8b:79:86:77:93:
46:d1:18:24:8d:86:af:82:e0:1e:dd:cf:24:f5:0e:e8:10:5f:
67:e9:95:16:3a:13:fa:89:ec:8c:3b:10:8d:c7:e6:e6:0f:51:
be:9f:af:0a:12:5c:f3:21:55:72:93:11:37:37:81:5e:4c:74:
68:a6:b7:62:7a:42:52:54:3b:f6:18:43:db:4c:2c:59:32:40:
b8:2c:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:01 2025 by rpki-client