Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: 0KiVG7kaaX78tuwG4AnqWOsQD0niirSTvyU6Ct6uYqo=
Subject key identifier: FD:A9:A5:3D:7B:23:EA:44:88:18:DD:AD:BC:34:0C:A6:38:92:4D:33
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 0194BD4E792DE3F5EE36AABBB25A93178AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 0298
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: 2DklcylzWxskP6p8h+IBy9VnZWyde9Z7k8erBTzghV4=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:2d:e3:f5:ee:36:aa:bb:b2:5a:93:17:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=fda9a53d7b23ea448818ddadbc340ca638924d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:d4:82:34:e9:91:96:9e:f2:68:36:bc:67:
4a:01:3e:50:84:e8:1d:35:f1:8a:f0:cf:dd:31:f8:
45:54:6e:11:b7:4c:71:96:e3:7a:3c:6a:b5:c7:53:
b6:a6:eb:cb:f9:a1:76:9e:10:d7:95:4b:9e:32:cf:
d8:ab:bd:36:37:46:fd:87:fc:88:af:f0:9c:b2:5e:
6b:a3:2e:56:54:2f:0a:50:62:3b:f5:b7:23:b9:0c:
73:4d:2b:b2:c9:5c:5f:09:5c:1a:86:01:88:39:be:
fe:0d:4f:a7:43:1e:dd:54:a9:87:be:0a:26:c1:63:
c1:66:ee:9a:b3:29:a5:92:d6:ed:78:f6:de:ba:0d:
3a:81:4d:10:05:b6:d9:c4:e0:71:b5:84:12:4d:df:
d8:72:d5:8d:e7:63:e5:e8:77:ef:7b:9d:09:fe:82:
4c:b4:a7:6e:92:88:66:17:2d:d1:7e:53:81:c8:17:
3f:6c:41:6f:09:1d:ab:f5:3c:f2:b7:cf:4b:48:9b:
d7:09:54:0a:28:c8:9a:00:66:4d:03:af:66:83:d9:
9c:f5:7b:22:ef:07:6f:fc:34:71:b3:e5:98:38:e5:
b1:e1:f8:99:0d:d1:67:92:ed:11:b3:bf:32:c4:f8:
04:b6:e0:3c:91:5c:66:99:45:c8:a0:54:10:c6:1c:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A9:A5:3D:7B:23:EA:44:88:18:DD:AD:BC:34:0C:A6:38:92:4D:33
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:14:f6:e4:5e:17:ad:fb:bb:33:d3:77:99:f5:e2:61:d0:b5:
81:82:6f:7e:8b:40:c9:7f:23:89:25:98:cf:dc:d7:85:92:11:
62:36:73:2d:49:88:5a:93:4e:6e:ee:12:fd:e3:33:3c:c2:d1:
3a:a8:73:ef:68:95:66:3f:ec:95:d8:15:19:36:54:57:a6:0e:
75:d1:39:95:a3:86:ef:21:e9:26:32:2a:64:02:df:90:16:20:
cd:7c:cd:93:01:92:9c:45:1d:6c:51:73:6a:4a:84:7a:c3:de:
4c:12:27:ae:f3:01:a8:10:f4:7e:ac:b0:fe:50:22:85:42:0e:
31:2b:af:79:9d:5a:3e:64:ee:79:06:94:be:ad:c6:7a:75:e2:
61:bf:c4:90:12:a2:5f:9f:af:1f:46:78:f3:cf:e5:14:26:e1:
bc:4c:5b:35:e7:ac:33:eb:7f:72:16:8e:92:32:61:2f:d6:54:
ab:ef:53:bf:13:bf:49:a5:e4:6f:9e:85:ea:ea:99:69:25:11:
b5:b0:3e:b9:00:31:86:0c:f9:61:53:f5:a2:2a:1d:11:20:09:
d6:f0:4e:dc:8a:db:66:1b:f6:bb:95:1e:8c:ba:e9:fa:55:18:
8b:0c:91:6c:c6:2a:56:d5:c7:3f:9b:35:e4:c9:0c:4d:36:67:
20:b1:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:11 2025 by rpki-client