Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: X8qcKAf2wEjhQ5d2SljoGVNk0+5VOTcLmMOKLTZIoB8=
Subject key identifier: 86:DB:0E:36:B9:DF:8D:8F:53:06:AC:14:F6:CB:A9:68:E4:C7:9C:74
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 0194BD4E7A967AA39005C8220C65C7761062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1107
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: zNxGJtlxRpMfaFQGmtwcsdO9V33wi9MC6/xLFLbD+nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:96:7a:a3:90:05:c8:22:0c:65:c7:76:10:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=86db0e36b9df8d8f5306ac14f6cba968e4c79c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:b9:54:ca:72:bb:fc:28:0e:d1:cc:1e:df:
95:d7:10:e0:7d:2a:92:be:04:6a:4d:8d:ac:64:5a:
12:4a:5f:eb:2b:8e:19:b2:0b:35:b6:2b:48:39:2a:
f0:5c:fb:62:b8:ab:fc:75:72:fd:aa:6f:5c:3b:81:
b0:eb:8f:ea:a5:36:07:84:4f:1c:19:4f:38:a8:66:
e0:dc:3d:7f:99:ac:f8:6e:8c:2c:73:89:09:1d:59:
82:9b:eb:fb:a5:25:85:87:9f:be:af:57:5e:56:6d:
9e:08:07:d7:0e:ad:25:31:42:3a:18:fa:4a:6d:70:
98:89:f8:4a:cd:26:f9:5b:63:64:d9:9c:2a:c0:9e:
f0:a9:f4:e3:6d:15:b0:81:23:9a:bc:f7:45:cf:ed:
b3:a5:44:ea:eb:b8:7d:26:42:49:a8:7c:d0:0e:6f:
a5:2e:01:be:7b:cf:07:58:27:24:bc:5b:78:f7:5e:
47:ca:5b:04:bd:4e:3d:93:37:36:c2:3f:84:53:7b:
5e:3f:56:af:3f:a0:d2:38:a4:12:23:27:07:fe:e5:
46:57:a7:60:72:66:fd:e0:f9:b3:38:31:1f:c2:64:
20:94:8a:51:31:51:56:7f:9f:eb:8f:13:23:bc:1f:
45:17:29:c5:5d:f2:94:1a:d5:f1:50:09:21:11:f5:
49:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DB:0E:36:B9:DF:8D:8F:53:06:AC:14:F6:CB:A9:68:E4:C7:9C:74
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:90:00:37:86:58:94:87:3f:1b:13:59:55:ac:c7:d8:eb:
22:8d:b8:b6:70:51:b0:ca:93:37:bc:5a:86:f1:e0:f9:03:33:
b7:ba:69:c5:00:be:3b:8e:fb:ac:5c:3c:c3:6b:c3:01:ca:31:
b2:a3:bd:f0:06:e2:19:83:06:ed:07:ae:23:d9:eb:5b:01:59:
45:72:59:d0:01:86:62:53:28:9a:d2:5a:06:05:fd:86:95:2b:
eb:c1:aa:45:85:31:48:5f:52:8e:be:21:54:56:d7:a7:af:70:
f8:f9:11:4f:27:e6:3c:13:da:58:92:96:6f:70:c4:f2:ed:04:
0c:8a:56:b6:0b:8d:94:3e:1a:40:a5:ff:9c:26:f4:91:21:56:
4b:0e:f3:bf:31:4a:ad:0b:fb:2c:c9:22:fe:3f:de:8a:83:ca:
4a:3f:ba:fe:67:66:94:8e:12:7c:3f:88:14:a9:a0:ac:5c:0f:
50:67:cc:08:ae:18:d8:40:f7:ea:96:b8:90:3c:a7:07:ff:95:
0e:a1:96:41:69:d7:a1:e6:58:e0:d6:02:4e:c9:c5:3b:67:5c:
26:5d:90:27:95:9d:e6:37:63:f4:e0:80:a4:66:bb:7c:62:23:
34:40:10:f4:47:13:ea:c2:64:4e:0f:92:79:2d:db:2a:d8:cf:
3f:f8:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:10 2025 by rpki-client