Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: MsDgh3XTSJA3OkTNNum1BnYgK78qQTa69qK4movAF4o=
Subject key identifier: 98:33:6C:A6:32:C8:FB:C1:A4:81:70:38:3A:69:50:87:2E:FC:D2:3C
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 0194BD85AB7CC1A9B117CBC668E28A91A2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: zVaF3VoTkyRlzSGNrHq9KZ64sJKE/QRJRGZ6vSsTfys=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:7c:c1:a9:b1:17:cb:c6:68:e2:8a:91:a2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=98336ca632c8fbc1a48170383a6950872efcd23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:44:60:19:05:d6:ec:fd:4e:a0:3a:16:32:
87:95:9b:66:f5:66:49:63:2b:0d:a3:08:ad:4d:09:
5a:75:50:9d:b9:79:a3:5b:b4:98:ef:88:36:5c:1b:
b5:93:f0:8c:15:d3:49:28:40:4f:43:a6:c7:2d:dd:
f8:7e:4b:ce:fc:47:22:b5:79:9d:22:e9:70:80:58:
d3:e6:05:df:eb:b6:d3:c1:a8:b8:56:a6:da:3f:44:
5a:c1:a2:df:4c:e0:d7:88:22:5b:bc:89:ea:b4:19:
67:da:de:19:46:89:10:7c:ac:a0:97:0a:ca:23:35:
fd:b5:fe:4d:e9:c8:e2:5d:00:e4:40:25:3c:b3:b5:
78:11:c6:f3:a8:a7:31:d3:ed:72:6c:5d:d3:b1:aa:
06:77:2a:11:ba:37:ad:c3:29:48:5f:52:53:92:26:
b0:77:3f:bc:ff:6d:41:df:83:f0:d8:ad:a2:96:71:
fe:ea:f5:f2:a0:9e:2b:4a:ac:b9:0c:f7:80:dc:e1:
ac:d6:f7:d8:02:94:e6:8f:36:b2:e5:4f:e2:0a:f6:
df:46:0b:06:aa:ce:d1:73:88:73:bd:24:16:c2:bc:
93:83:16:6f:e6:3a:79:12:87:a5:de:9f:0e:7e:21:
d1:e7:39:20:d6:84:bf:21:14:22:e4:99:42:e3:0a:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:6C:A6:32:C8:FB:C1:A4:81:70:38:3A:69:50:87:2E:FC:D2:3C
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e5:d7:d0:e1:9f:f8:23:c2:08:73:a6:df:ce:62:17:0c:90:
35:9a:2f:ae:a9:09:57:a8:4f:96:68:6f:94:c5:20:94:e0:85:
d0:fd:26:18:7f:89:c8:4b:63:7c:1e:e3:a0:79:bb:ed:a3:4d:
d8:41:08:a4:1c:72:0a:d7:11:8a:d6:ee:57:19:5a:eb:d8:9d:
cc:88:7c:2f:b5:92:72:c2:0b:b0:c5:90:37:c6:3a:2f:e2:af:
c1:91:7a:bc:43:cd:7d:b4:2d:54:26:f4:49:90:ff:83:7d:4e:
c1:e9:c0:e6:99:48:81:13:28:ef:90:41:32:84:5f:27:6a:3a:
b1:df:fe:77:14:07:1d:d6:9c:d4:5e:c8:80:58:60:ed:35:8a:
fe:26:82:de:19:af:b9:42:8b:f0:39:63:f3:be:96:c8:e8:8c:
6a:c1:2d:e3:42:2a:2e:fd:dc:a4:88:16:5a:a3:05:d6:bc:43:
ec:9a:1a:06:f3:76:93:de:db:7b:39:30:2d:a3:f4:2a:fb:cf:
f3:f1:32:03:88:e2:d3:11:38:ce:4c:bc:19:2d:a7:64:71:0f:
b6:91:16:e2:8a:48:61:08:fc:e4:7a:ca:6b:15:e4:d2:30:9a:
48:cc:b9:40:34:bd:3b:de:2f:5b:12:ea:05:a3:c5:51:cf:24:
82:8f:ec:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:58 2025 by rpki-client