Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: 6WUSb8VrxWPalnHqXeELCbD+tlZpTuWvnRngm2zwvys=
Subject key identifier: 0C:63:3F:2C:09:EF:33:BF:DE:C3:30:19:A5:26:D9:9B:51:96:76:55
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 0194BC731EE7769E64B2EAAA91E12B03F1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 0107
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: orQ0d7QnFiFf1W/GOY/fyjo86n/Y+V6zVK6hWXwsRJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:e7:76:9e:64:b2:ea:aa:91:e1:2b:03:f1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=0c633f2c09ef33bfdec33019a526d99b51967655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:0c:16:2f:a9:fd:93:25:52:3d:5e:af:44:
a1:0d:5f:3a:17:36:f5:b7:6d:32:65:0c:c5:f0:dc:
b1:e4:cc:5a:80:68:cf:31:7b:21:8d:5c:1e:6c:41:
1f:73:a4:e1:c6:39:55:b0:41:35:a1:fe:72:2e:97:
24:d1:2d:cb:20:4e:25:2e:cf:19:7b:3f:d1:b7:b0:
8f:75:8b:30:98:10:08:3c:e4:6e:89:0e:9d:b0:f6:
37:ff:2a:a2:58:a3:c6:aa:f9:98:84:b0:bb:b6:36:
1f:d0:95:84:a0:99:5d:f3:c9:e0:e6:72:06:bb:d8:
39:05:d7:c9:c2:1d:a0:18:aa:21:64:63:a4:67:96:
26:6d:2f:8d:1b:b7:4d:12:24:45:47:5b:b0:70:73:
ba:f4:c7:75:56:3a:35:7e:53:c3:a8:3d:d1:ee:08:
47:50:91:9e:e9:10:db:6c:55:a7:56:b5:c7:72:7a:
87:a8:10:91:05:6b:a2:ed:37:14:fa:fb:8b:a8:97:
c7:29:b0:ed:26:8e:ee:de:a4:58:24:14:98:b5:09:
c1:08:c4:4d:21:20:8f:93:60:c0:6d:f7:1d:29:0a:
dd:93:94:ba:9c:cd:6d:8e:62:ae:75:cf:e9:ac:90:
01:f6:6f:02:4c:ca:96:06:e5:95:a1:fe:27:d0:55:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:63:3F:2C:09:EF:33:BF:DE:C3:30:19:A5:26:D9:9B:51:96:76:55
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ea:08:4d:e9:59:d9:bf:52:87:28:42:58:aa:c2:63:79:58:
17:66:d3:6b:b2:d1:d6:e6:53:69:c1:fc:e3:8b:42:1d:69:64:
c1:a4:8d:9f:fe:fe:bb:57:f0:1d:82:b3:6f:59:8e:a9:6f:f7:
a7:81:0f:6d:3b:62:df:f9:4c:33:b9:64:c6:71:9f:8f:39:2d:
96:b3:1c:5b:51:6f:ec:f1:1a:fe:17:8f:1e:9f:ff:fb:d9:f7:
95:fd:ad:6a:7b:71:c4:59:1a:ee:f2:b8:3d:f9:fb:f1:ab:c2:
58:d5:4d:0f:c0:c0:49:bc:3f:39:d1:17:88:34:d2:78:99:e1:
9e:b9:23:6d:73:ae:fd:c5:ec:51:66:2a:d1:c9:9b:34:9d:28:
86:e9:27:10:fc:ea:e7:3a:f2:f4:db:dd:67:b0:4e:a8:06:b5:
f6:af:62:94:7f:7a:4f:8f:be:36:d8:35:59:9f:0f:32:db:96:
26:26:38:c4:f3:85:ef:c9:04:f9:4d:12:33:31:28:02:3c:62:
56:f7:f0:a6:c5:00:6d:b5:0c:9a:f8:23:1e:6d:28:17:8f:01:
6c:be:2a:d3:dc:85:f4:14:c5:e1:e0:e2:46:b0:a7:2e:30:ca:
d2:e8:d1:a7:78:01:04:dd:c5:f0:8c:e4:0c:76:19:5c:6d:38:
de:1f:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:06 2025 by rpki-client