Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: k5lJS50/BZ8slk9bDtcPpzUwGSEsq/saQd2+lIIcezg=
Subject key identifier: 37:0C:F0:5E:81:CE:68:A4:15:5E:2D:BB:0F:73:6F:95:96:11:BE:88
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 0194BCA9AEB0A7F44A8438D625065B4355A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0C42
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: nf8JTjTKjKwDenRCBvTrtZJ6UeCq0E1df/QQgcQnC5I=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:b0:a7:f4:4a:84:38:d6:25:06:5b:43:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=370cf05e81ce68a4155e2dbb0f736f959611be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:13:a0:0f:65:89:cc:1f:45:d6:9f:98:c1:
d4:48:5f:e3:eb:b2:43:f5:35:eb:1e:57:2a:05:53:
c8:c2:44:f3:94:60:05:8d:fa:21:53:b2:92:84:1a:
bd:80:9f:98:7a:76:c7:9c:c6:5d:85:d5:c6:41:cc:
1a:16:a3:18:52:0d:48:9a:e7:22:70:37:ae:33:e5:
72:45:19:90:b6:4a:b3:43:8f:29:62:cf:91:21:c1:
8e:5d:84:db:93:0a:c6:75:40:8f:5a:ea:44:4a:0a:
94:22:61:d2:78:7a:05:7c:1e:64:0b:12:97:29:48:
d8:a0:c3:fd:f6:ed:b6:83:d9:e9:e7:c1:f3:b1:11:
91:9f:b4:b6:48:53:c6:ec:ac:3d:9e:9e:d4:a7:83:
cb:c1:eb:40:5c:fc:a9:b8:2f:a2:c5:15:34:9c:15:
15:02:bb:d2:0a:78:29:83:a4:51:9c:6d:02:f5:fa:
4a:c0:87:2d:2d:77:7c:34:94:56:de:4d:2a:e2:99:
6d:f1:d6:46:31:63:3b:7c:e1:0f:21:a5:04:7f:a9:
f2:3f:75:76:3a:a2:f5:87:ce:cf:c7:23:9f:8d:dc:
d7:d9:35:ec:26:9f:98:db:e1:e5:39:ba:20:df:da:
91:df:e4:f9:57:be:03:0b:6a:b8:28:12:01:0a:d3:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:F0:5E:81:CE:68:A4:15:5E:2D:BB:0F:73:6F:95:96:11:BE:88
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:5b:af:2f:db:d1:96:16:58:d8:2f:06:ec:15:b1:90:b2:
03:0a:cb:8a:36:66:d1:d7:dd:1f:d9:36:a4:84:0b:3e:eb:8b:
4f:ef:31:e5:7f:56:00:0e:97:48:92:b5:02:2e:f8:98:cf:59:
a6:0a:b7:d4:95:c7:c7:70:8b:05:84:df:1f:e2:d6:fe:62:6f:
37:56:8c:df:9f:cc:60:c1:50:a4:8d:ef:cf:b3:5c:df:7c:37:
59:5f:ea:7a:f3:33:8a:6b:c0:18:93:09:c1:89:76:98:33:7e:
71:55:b9:63:81:3f:f2:29:1d:07:3e:08:3b:70:4b:f9:a7:41:
07:cd:3c:9d:4d:de:25:d1:5d:5e:f1:52:ca:9e:de:24:e2:62:
d0:6e:a9:5d:22:6d:f7:67:3d:7f:5d:95:b8:8f:df:a8:4e:93:
16:38:85:2b:ad:58:b8:65:9c:4f:a6:21:d6:a1:ae:db:0a:39:
e3:9b:40:65:cc:bc:0e:07:f4:85:c3:ee:08:95:85:1d:0f:e0:
5e:c4:ca:18:92:13:ca:60:a9:8f:d3:0a:f2:b0:5d:ec:84:b9:
e1:92:a6:cf:d8:38:b0:55:19:d5:ea:3f:fa:41:01:aa:b8:21:
1f:1d:33:e1:2a:61:d9:a7:a9:3f:1c:d0:1a:01:4f:d2:61:84:
42:58:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:23:57 2025 by rpki-client