Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: qKqwWLFGD3OLWgnyW8qPTmqj1nSjHJiC+ZeipF1iM90=
Subject key identifier: 75:F3:8C:96:CA:17:AE:10:E8:7A:5A:84:B5:B0:92:3D:AA:C8:A9:AD
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 0194BCE0BCCF16C2C8694A874D19032A493E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 07FD
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: CFfAltEJc/Qe9tX10dxYuHeTcufXOIQ2MSz6O4g9aLY=)
2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:cf:16:c2:c8:69:4a:87:4d:19:03:2a:49:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=75f38c96ca17ae10e87a5a84b5b0923daac8a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:fd:c9:31:89:de:a9:73:88:5a:a0:4c:0b:
60:72:7e:22:d1:ee:6e:43:a0:c0:56:77:ce:74:58:
2f:3a:38:a5:88:e1:6c:6e:86:55:8a:03:0e:23:e2:
42:ef:81:77:15:5f:30:5f:7e:fe:ea:d2:e2:11:3c:
ce:a2:1a:86:47:95:cf:b9:d6:2e:69:ae:5e:c2:f3:
a7:11:11:0a:14:85:be:26:a4:e2:17:65:27:d1:b2:
f2:a2:cd:86:3e:cb:1d:5f:39:b6:69:9b:78:4c:55:
79:0f:27:83:8b:8f:4c:d5:fb:de:1a:04:22:07:b8:
7a:0f:6b:48:4e:cc:cd:d3:37:c4:3e:c0:eb:fb:cb:
eb:8a:55:41:51:6f:01:18:eb:e1:42:80:b5:e0:3e:
17:82:dc:ed:a0:ab:aa:d9:46:ca:5d:64:c1:44:c2:
af:c9:ed:1c:a8:b5:72:25:ec:79:4b:aa:df:a4:a9:
c7:4f:16:5b:a7:f2:8a:c4:62:87:e9:94:2d:0d:bb:
22:9e:26:78:a6:81:6e:ac:4d:8c:fe:5d:62:c2:62:
a0:5d:13:27:2a:58:e5:ac:8a:44:d0:7b:e9:1e:8d:
2d:d0:f6:3d:21:49:9f:50:d8:b9:7f:59:9f:8d:be:
5c:5b:49:36:1b:b7:ce:3e:8c:1c:55:94:e2:43:d5:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:8C:96:CA:17:AE:10:E8:7A:5A:84:B5:B0:92:3D:AA:C8:A9:AD
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3a:d7:e7:7c:a2:83:97:45:fc:95:c8:11:65:01:fd:ad:09:
fc:e6:be:2f:5f:69:75:5f:4f:80:91:0a:86:6c:ee:08:c1:12:
d3:9a:a5:e3:15:4b:77:dd:cc:3e:9f:ea:1c:89:d9:4e:53:aa:
95:0f:44:9d:b0:4b:c8:59:14:93:85:36:85:dd:36:59:41:bd:
25:53:b5:9c:09:5e:b1:aa:2a:04:86:37:95:54:4c:f7:d9:d2:
51:db:70:5c:4a:c5:43:35:57:70:5c:36:f7:76:96:c3:9c:b6:
08:b9:94:23:68:f7:e7:09:41:d2:94:9f:12:2c:3e:21:0d:54:
62:37:51:b1:84:91:85:25:e4:be:92:d5:2f:e3:d8:93:48:dc:
57:52:a4:64:00:8d:db:74:50:57:3b:41:f2:a8:42:d3:3a:d2:
12:9e:44:78:0f:bb:8f:4c:5e:08:6b:9e:03:f0:87:c5:49:f3:
21:ea:a7:a8:c1:90:19:ac:78:24:0c:c4:81:bb:6a:db:37:7b:
11:da:c4:3a:76:1e:a7:79:6a:f3:22:ca:2e:58:e3:3d:14:b6:
70:27:d2:fe:3b:17:36:2a:eb:6a:9a:82:bc:ff:33:cd:9b:92:
c7:1f:eb:ac:c5:9d:45:51:59:a0:6b:2d:65:d4:c2:66:e0:e1:
87:9a:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:06 2025 by rpki-client