Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
File: 6vauX7W-PpqblzGcevhQK76JOjc.mft (raw, json)
Hash identifier: 4TpYriwSVilLvYRoNFPq5IZ0ub1sekQQsDn/tLxtYbM=
Subject key identifier: 41:0D:64:28:2B:84:7E:F9:4C:E0:D7:C1:0A:60:A8:71:DE:7F:25:F5
Authority key identifier: EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
Certificate issuer: /CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Certificate serial: 0194BC72A04945160567B3CC34AFFC7493D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
Manifest number: 13CA
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: 6vauX7W-PpqblzGcevhQK76JOjc.crl (hash: vgn4xti6sZ0gHMdYQADLNicW76BYLsX2HeifjOZw7L0=)
2: Ahvmv48ngf-KjVDLWWBDTBDASd0.roa (hash: 7ZyR7Sl5BjMwCkDy0XgoHIL8hy/aGuAql4BiOWVa8/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:49:45:16:05:67:b3:cc:34:af:fc:74:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf6ae5fb5be3e9a9b97319c7af8502bbe893a37
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=410d64282b847ef94ce0d7c10a60a871de7f25f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:4f:91:2a:f9:78:5f:3c:cf:39:b7:46:27:
4a:88:29:05:8a:ae:fc:da:10:d1:5c:eb:99:9f:47:
43:05:36:c7:e6:96:86:fa:0a:ae:31:fa:f5:db:4f:
24:eb:de:3a:20:b6:d3:23:ed:b0:87:b1:04:12:df:
23:7b:2e:75:82:32:3d:71:dd:d6:e0:ba:b1:fc:db:
f1:e3:d4:fa:54:c7:0b:5f:b6:53:dc:89:21:93:a4:
fc:0a:02:f0:44:35:f1:40:e5:53:ee:6f:43:f0:0f:
be:f4:20:02:fc:c7:f7:3b:68:86:23:9f:66:ce:58:
76:94:12:04:f3:87:bb:ab:e8:6e:2c:db:2f:72:4c:
6e:cd:90:4f:a6:f1:b0:b0:e8:6f:ac:cc:77:50:47:
89:e0:e7:55:ef:35:4f:01:54:3b:fa:af:3f:75:4d:
ba:81:9f:bd:16:86:32:fe:ce:18:aa:86:d4:e4:cb:
d6:3e:be:ed:b4:34:41:a2:16:73:42:ef:7f:d7:5e:
e9:82:e4:0b:b4:be:cc:30:d2:e8:99:d9:2d:4a:e6:
a0:21:da:20:8a:62:1f:73:cb:13:66:55:46:c8:30:
3d:40:b4:f4:7d:99:69:6b:e1:73:51:1e:e5:8c:5e:
e2:92:87:27:31:3a:28:e3:84:93:1c:6c:29:e7:a8:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0D:64:28:2B:84:7E:F9:4C:E0:D7:C1:0A:60:A8:71:DE:7F:25:F5
X509v3 Authority Key Identifier:
keyid:EA:F6:AE:5F:B5:BE:3E:9A:9B:97:31:9C:7A:F8:50:2B:BE:89:3A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vauX7W-PpqblzGcevhQK76JOjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/c7dbdf-1e2c-4fba-8411-c67d713cdabc/1/6vauX7W-PpqblzGcevhQK76JOjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:63:d4:16:6f:4f:d0:df:b2:d3:f9:1d:72:e3:6f:9e:d3:
d4:d4:56:4d:e6:3c:0b:58:42:74:ba:1f:f2:b8:f5:1f:6e:b3:
4d:e2:31:45:93:b2:d7:a1:80:83:af:c0:0e:ce:7d:2f:3e:b8:
7e:cb:13:37:9e:ed:7e:79:2d:61:c1:f3:81:c2:73:4d:aa:e8:
b2:5c:58:62:b5:49:2c:dd:15:27:d8:92:bc:54:97:e1:9e:87:
d7:71:82:f6:15:43:0e:8a:ea:b1:de:01:d0:fa:75:55:33:37:
0b:f1:07:31:0f:3f:a4:2c:63:fc:d4:db:f4:eb:7e:23:61:df:
d9:cc:f2:17:d0:32:40:f6:83:e7:2d:80:18:ce:81:74:8c:61:
d5:fb:5e:7e:bc:e2:67:28:8f:60:0c:36:9f:98:66:5d:78:a8:
32:54:3b:80:df:80:0d:61:5d:84:b5:86:16:44:01:c6:03:73:
48:31:16:b3:43:92:da:d6:58:a0:1e:2a:6a:aa:0b:9e:73:20:
06:a5:7c:d9:fe:64:eb:31:69:3b:fd:5c:d4:52:9c:6c:1c:ad:
11:65:1d:87:6a:3b:bf:82:89:6d:34:f2:58:d8:ff:5e:97:fc:
84:f7:f8:f3:d6:23:42:e7:e4:80:34:28:2e:91:9f:62:d2:f9:
6e:7f:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:41 2025 by rpki-client