Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File: B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier: g0UwDtaPakPBPCftLUXjFO75tVymUVC8cGjDOZp5W6E=
Subject key identifier: A6:16:6B:4F:59:59:4F:A4:49:BC:52:CD:94:68:21:13:3D:18:CC:DF
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer: /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial: 0194BD85B2B51A642EC9B58EF6A741CE305A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number: 068F
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: aQN4wu0NulXiGQb8gO11MAWn7wg1NsH9def7aQEA+9I=)
2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:b5:1a:64:2e:c9:b5:8e:f6:a7:41:ce:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=a6166b4f59594fa449bc52cd946821133d18ccdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:36:fd:b2:ae:63:17:0a:08:ad:b1:da:36:
ec:42:6a:bc:b1:57:f7:e9:c7:5b:44:ff:ee:35:be:
a5:bd:2f:28:58:0b:58:ab:cd:ab:f7:23:6a:b6:c6:
35:5f:82:8b:d4:b8:61:b3:36:28:75:65:b9:f3:28:
66:30:01:3a:8c:c4:18:dd:ea:f4:1d:d9:27:eb:9f:
8d:22:63:c8:50:13:9b:4e:a0:d4:ad:b9:8c:76:da:
f6:ca:25:0e:b0:59:88:90:81:cb:23:8c:94:6e:f6:
7d:b9:99:df:96:60:e8:7c:1b:95:76:30:64:2e:e8:
bf:90:37:0e:9b:5b:6a:4e:d2:5a:f5:97:50:cb:20:
de:39:bf:d8:95:d8:19:9f:72:ff:5a:49:58:e6:7c:
2f:78:aa:6e:35:5c:12:ae:7d:a6:1c:c9:13:3a:78:
8d:c9:22:49:80:61:9d:34:2d:3e:8b:49:69:01:fd:
f1:8f:c5:91:06:e5:21:79:3f:c3:fe:8a:65:3c:c6:
f2:ec:c7:bf:4c:33:21:0e:7c:d4:5f:36:b9:32:0c:
86:bf:0b:9a:ef:8c:18:50:d9:8d:b4:e4:80:8e:20:
25:7c:1a:34:9d:df:68:77:21:84:da:4b:66:40:c7:
03:92:8a:58:e8:6b:b6:2f:e2:58:9c:d9:fe:e3:f5:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:6B:4F:59:59:4F:A4:49:BC:52:CD:94:68:21:13:3D:18:CC:DF
X509v3 Authority Key Identifier:
keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:fe:f1:ba:4f:4c:b2:54:c5:c2:74:fe:77:80:24:fa:07:
22:86:b9:07:13:f1:d5:9c:96:6b:54:4a:5a:68:f2:33:56:e4:
5b:8b:dc:4f:50:89:78:04:e8:5b:d2:92:a3:68:87:7b:64:f8:
9b:c6:db:b3:8b:47:f3:31:d1:35:6a:27:3a:17:9c:cd:17:54:
42:b6:f6:78:5d:80:9a:4f:ec:52:9b:3f:71:7a:97:30:cd:73:
db:a8:98:cd:72:7d:72:d7:84:d8:e5:12:9a:5e:8f:d2:af:4c:
b6:fc:85:92:11:1f:01:4f:51:0c:05:ff:e9:91:fc:fe:a8:f7:
3a:89:05:d9:07:4e:08:dc:68:1a:7a:14:b9:f6:0a:58:ab:4a:
de:c2:8d:56:42:43:96:81:f1:3e:ae:2c:23:62:5f:f3:f8:5e:
9f:74:5d:d2:cb:a4:ec:6e:62:a5:58:98:ae:03:39:7e:a7:02:
00:02:ae:ed:ee:67:cf:62:85:16:e8:e7:a5:54:a1:ef:15:2d:
d9:3d:ed:fc:63:c1:e8:16:94:e5:90:a1:6c:08:d1:c1:58:53:
d0:de:a4:d3:cf:08:73:85:29:2b:9a:68:d2:bb:46:77:5a:45:
ef:43:cc:45:d3:fe:72:a4:d2:6e:24:c9:ea:80:5f:af:61:64:
a1:11:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:10 2025 by rpki-client