Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: YwkTDw31QFK7yCC73rLus/SQgb5/ml58XFmnt0CuoHM=
Subject key identifier: 2A:B9:F5:B9:15:05:96:DA:8B:90:A5:C3:57:36:9C:7E:D0:B8:64:08
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 0194BBCDAF258256807A525A73D54B61A10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 07E0
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: 4oZqWJULi6fak5NJNrEH5IDHHWI811dJ1Q04ikSei9E=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:25:82:56:80:7a:52:5a:73:d5:4b:61:a1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=2ab9f5b9150596da8b90a5c357369c7ed0b86408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:e0:7d:40:72:82:38:1b:dc:ad:47:ac:59:
e5:72:97:02:e5:80:c0:87:93:16:52:27:34:7f:c8:
96:50:0d:dc:29:1b:b7:63:f4:c5:b7:d5:6e:b0:6e:
d9:99:6d:12:5e:17:3a:f7:42:fe:7e:e4:3c:1d:4c:
bf:ea:81:5d:c1:3a:9e:07:5b:6e:59:0e:f4:b2:0e:
a2:bf:20:1f:97:70:22:f9:46:9e:7f:b1:ad:7e:87:
f9:7d:fd:89:f0:b7:6d:55:be:af:6a:c9:8d:4f:64:
90:e6:99:33:9d:5b:4b:cc:c7:ac:6b:f7:a7:d3:72:
18:95:db:6b:8f:af:94:5d:82:19:70:2d:6c:4b:46:
86:6e:b0:41:c5:48:9c:2a:4c:16:d5:d1:83:2c:81:
ff:65:f4:36:6d:7a:c2:d8:7b:84:a3:35:34:4d:97:
91:5e:fc:ba:2c:40:9d:3f:f4:b6:bd:72:43:db:b4:
d2:00:9c:2c:6c:db:68:a6:12:b2:58:67:c9:e8:a3:
3e:e9:97:cd:1b:d2:1a:97:4c:34:7c:8e:56:48:16:
a0:23:1e:10:14:83:eb:2b:39:f3:ea:b0:83:57:2d:
00:e0:85:c7:ff:8b:8d:0d:a8:55:7e:aa:4e:c9:2c:
fe:f1:83:03:4d:8d:e2:5f:5a:e1:b4:a9:ca:87:f2:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:F5:B9:15:05:96:DA:8B:90:A5:C3:57:36:9C:7E:D0:B8:64:08
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6d:2f:5d:3a:29:96:11:31:8d:c8:e6:9f:91:63:bc:0d:53:
c3:f6:40:35:eb:d7:1d:4c:20:1b:69:c8:8d:f5:0e:64:05:42:
a8:d9:13:9b:36:3a:af:73:56:4c:78:bf:1e:20:99:e0:10:ad:
65:5b:f0:27:8f:ee:4b:7b:80:4a:a7:62:84:dd:ef:fa:cd:66:
3b:29:94:f1:ca:2d:d3:fe:e3:a4:b6:7e:72:92:8a:56:db:f6:
29:5c:dc:ba:6b:2e:d1:5d:5b:66:65:d1:f6:17:b9:36:b0:33:
94:74:e2:b7:20:7d:dd:4c:0a:d2:2f:7b:01:97:8b:91:e6:30:
d0:50:d7:a3:62:12:a0:2e:00:f2:91:29:03:fe:9c:af:6f:b0:
96:5e:a0:4c:5b:78:fe:9d:7f:bb:65:2a:28:5e:f3:c7:60:ca:
35:51:ed:11:40:b0:9b:da:75:66:7e:f7:f6:0f:85:1b:42:4b:
09:11:e2:2b:76:29:15:83:d5:be:50:f0:c3:23:49:ef:5a:a2:
3b:5a:1a:aa:ed:c8:59:49:89:c6:f0:ef:64:6e:cb:de:35:d8:
d2:0c:06:ee:fb:fb:7a:b6:7b:ec:17:7b:76:e5:72:0e:49:4a:
2d:f5:d3:23:a7:47:4c:7c:b9:51:35:8e:d3:07:19:15:bc:a5:
5b:30:36:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:59 2025 by rpki-client