Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: P8b1n7d0kJUho6aJMxIuPl7hZLevUyOUUS1tLvuLtMg=
Subject key identifier: 41:8A:03:18:A3:E1:21:FE:AA:D8:D6:A9:98:A9:F1:6C:CA:EB:C3:58
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 0194BC3BE2D95895A2E6035D0AF240E6EA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 07C7
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: H2ciew030YT_ZKL58SNBSDs0iQc.roa (hash: dr7FPAyraTf1nqxR0HjlvGsow4ZxkGibDCSpB0tZ3CU=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: mo8iJrw2pgmPdoqsrVvQItQvoLc4oy6fafp4+hvwELk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:d9:58:95:a2:e6:03:5d:0a:f2:40:e6:ea:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=418a0318a3e121feaad8d6a998a9f16ccaebc358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:25:f1:64:d0:05:46:ed:3e:1b:cc:d2:3e:
fa:f9:b6:15:e0:23:f9:ea:4d:1f:0d:ae:0e:20:09:
45:2a:2b:c0:be:14:3e:b0:73:b0:aa:56:64:d7:fe:
cb:0e:fa:78:a4:a8:a9:c8:ef:7f:7a:20:31:d7:5f:
cc:bd:af:70:05:53:52:b2:64:d1:67:95:f9:24:a1:
fc:55:ad:34:50:1a:00:aa:e2:91:5e:47:7e:76:7c:
b9:06:cd:29:d5:91:41:e8:f8:d4:a5:e8:c4:06:c7:
8e:9f:c0:c6:75:be:2d:38:89:73:cf:db:05:4d:9f:
3e:c6:40:39:a5:b4:d6:35:df:d0:d0:9d:f7:6e:d5:
74:b1:be:77:da:2f:92:66:ad:89:e1:ca:81:4f:0a:
16:8e:30:26:c1:25:b2:d9:48:ae:22:9a:6e:cd:8f:
7b:4d:98:bc:bf:f8:17:3a:98:76:52:38:1c:c3:b5:
56:f4:42:62:43:f5:ed:93:b3:86:a4:a4:3f:1a:67:
8a:2e:5b:9b:17:9e:c3:18:e3:24:0b:57:8d:bc:8e:
ac:90:71:f0:d8:19:87:87:ea:2d:44:ed:1a:9d:f6:
7a:0c:38:4c:44:d4:40:c5:2f:73:da:cf:31:0c:75:
f1:e9:dc:1f:22:4b:9a:8d:3c:12:c5:3d:90:bd:20:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8A:03:18:A3:E1:21:FE:AA:D8:D6:A9:98:A9:F1:6C:CA:EB:C3:58
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:90:c3:d5:48:58:f7:1c:dc:07:84:b0:56:d6:91:69:c6:a9:
d2:7c:7b:b6:d5:c9:c1:6a:a0:21:ef:e2:12:82:d6:35:54:1f:
f4:d5:b7:09:0a:1c:bc:ff:83:8c:15:e9:35:3e:5f:23:c4:9f:
94:e9:57:4f:07:95:08:52:87:62:46:9a:a5:e7:01:f8:a0:aa:
24:31:65:72:5e:91:e5:a7:31:da:78:97:17:ad:86:21:bd:fd:
34:f2:b1:b3:40:87:52:5e:b5:f3:3f:2c:0c:5a:f5:33:99:c2:
51:80:f2:ff:c8:31:b3:37:7a:fc:e9:78:c7:64:83:0e:f0:0b:
5a:76:d2:c5:90:df:8f:19:95:3f:5f:f4:3a:0e:b3:a5:32:ae:
75:3c:a0:d6:3f:11:4e:81:1f:4f:0c:e8:63:57:f3:85:96:f4:
9c:35:15:87:fc:6c:dd:64:c9:87:7f:26:55:e5:4f:94:dd:50:
6a:0c:36:83:49:cb:5b:80:f8:f1:60:95:4e:62:e3:81:3d:ee:
14:1a:24:d2:8b:2b:12:c1:e0:5b:b7:00:79:e1:71:71:67:53:
bc:9f:ab:8a:1e:be:b0:0c:76:6d:4b:0e:53:26:0d:71:22:f8:
e7:f9:51:a5:32:b5:29:5e:1a:fb:61:7f:b8:70:1f:d2:bf:f9:
2e:eb:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:58 2025 by rpki-client