Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: +btoC/YOVU6h0dV5T/pBya7SEzrtb3f3V+yUP8cCLW4=
Subject key identifier: BB:3A:75:0B:C5:1F:C0:25:C1:B1:E1:4C:A7:A9:C9:9B:AF:71:9A:37
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 0194BC3C84EA20F76179EFF37884840EAAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: VQWvci/5mmZ303VAInO1/mvCVi7+lmrhcYaVAp6MPHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:ea:20:f7:61:79:ef:f3:78:84:84:0e:aa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=bb3a750bc51fc025c1b1e14ca7a9c99baf719a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:9b:08:29:e0:ca:ee:1e:2d:b1:ec:05:d7:
10:85:c7:0f:57:2c:df:9c:79:a3:ff:28:e7:d8:bf:
d8:74:bb:d7:01:24:2c:ad:eb:65:e8:82:d1:c2:be:
6f:c9:7d:de:eb:36:16:7b:1c:b2:37:a1:a1:48:de:
4d:50:16:bf:62:36:17:6e:da:6f:93:95:c6:84:47:
57:1d:26:ac:99:e7:19:d9:6a:e8:24:9b:6b:62:cf:
7d:e0:53:ca:27:fd:9e:97:3e:3a:b7:63:6e:d9:f8:
0f:dd:cc:55:64:4a:db:9a:53:e3:bf:67:24:14:ba:
4f:fd:c5:d3:5b:03:c5:c9:23:b5:bc:77:d3:22:1e:
8f:6c:1a:3b:f9:03:76:ed:f3:11:02:da:79:39:87:
55:01:10:c5:1f:23:2c:01:8a:8b:35:0b:3e:c9:6e:
e0:96:83:b7:18:e8:d8:91:18:0d:87:6b:f7:e3:0b:
18:9e:b4:13:ab:fc:40:a4:8a:87:05:12:36:f5:12:
83:46:66:d9:85:83:f9:4e:31:0a:9b:4e:7e:37:01:
0a:df:d3:a6:3d:89:81:99:e8:bc:f7:51:f2:bd:c5:
11:89:e7:0c:d3:82:ae:43:13:f4:59:17:91:fb:fe:
9c:3e:d2:38:80:62:0d:e0:8d:7b:e5:e8:0d:7e:90:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3A:75:0B:C5:1F:C0:25:C1:B1:E1:4C:A7:A9:C9:9B:AF:71:9A:37
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:77:87:86:73:1c:83:21:0b:1f:9e:5d:07:5a:3f:20:c7:31:
9f:90:06:7f:9a:86:98:55:aa:50:34:8a:55:83:12:09:55:ed:
12:c7:62:a4:0f:e2:24:9a:d3:ef:dc:1f:fa:48:1e:3e:6e:8a:
40:8f:ba:6d:4b:cc:f4:c5:c7:e0:e5:09:aa:47:d4:9b:b2:93:
02:20:2d:4a:35:45:a1:a4:00:71:b4:9f:2f:a5:8d:4d:f0:32:
8f:a7:d7:50:79:a5:1c:f0:27:0a:ed:5f:11:40:9c:28:c9:d7:
4b:56:19:99:49:19:43:4a:71:16:83:25:e4:c4:89:25:42:d9:
8b:cf:48:c0:25:59:e8:77:19:a8:b9:55:29:e1:55:ef:95:71:
fc:bd:85:d2:33:45:a2:65:10:a1:3b:51:08:25:58:92:a5:72:
be:0e:88:83:20:8f:82:11:ca:d3:14:c4:0d:01:14:4e:ba:23:
73:39:2f:f2:8b:aa:da:b2:72:e5:6a:f0:f2:21:48:0f:3c:62:
4f:c2:41:81:56:d5:07:39:c8:29:44:9b:06:67:4b:85:07:a5:
31:49:06:f9:0b:0e:73:d8:87:aa:27:be:5a:b5:28:c8:74:e1:
7e:8e:c0:15:05:e8:34:57:13:68:ae:69:ce:8b:3b:b1:ed:3e:
f6:24:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:03 2025 by rpki-client