Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File: c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier: Hx7qFzGMit8WbQLitNeaeqzrfwLIYWE4TB4O57fujjM=
Subject key identifier: F3:E5:46:AC:DC:34:0A:7C:A2:31:87:E8:EC:E8:9A:61:B6:DB:AD:A7
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer: /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial: 0194BD17D11BB51649750BDEC434640763B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number: 1247
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: FPh5aHMRGLoddh6VjWKzlbnci7meglVAMfxDHCEpzl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d1:1b:b5:16:49:75:0b:de:c4:34:64:07:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=f3e546acdc340a7ca23187e8ece89a61b6dbada7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:fd:e1:0c:02:15:2b:97:26:a1:6c:74:75:
5e:1a:30:c5:32:f2:5c:cd:84:1b:de:b5:45:d4:0b:
87:5c:a8:88:84:a7:40:fa:e6:78:66:64:b2:80:6a:
8b:6b:81:08:e0:09:a7:22:3e:e8:17:a8:ac:26:a3:
6c:d6:da:e1:40:c4:ac:a2:93:e4:7e:9a:ad:53:cf:
25:ff:a8:14:79:50:6d:df:d0:57:66:09:01:bb:e3:
21:7b:36:24:11:d9:e5:bf:4d:95:f7:ca:b2:b9:0d:
e7:80:40:27:84:6e:f3:84:b0:33:e1:99:ae:ed:90:
0d:08:ec:99:56:e8:23:03:86:ca:4e:ee:46:8e:ce:
5a:6b:1f:ab:c8:00:6a:09:27:97:92:e7:6c:9d:ad:
91:71:a9:9a:8d:d5:38:2a:1e:23:bf:d0:b0:31:f2:
ed:5a:53:e2:0c:35:b1:89:40:48:e3:e1:1c:48:ba:
a7:54:ac:41:d0:f0:b9:42:62:1a:44:c0:1e:13:54:
14:fb:28:ef:4f:38:a3:c0:f6:89:54:ae:08:68:b2:
c9:b5:20:1d:f2:45:35:12:15:7a:df:3c:da:5b:61:
2c:7a:bc:a2:3c:5c:3d:8a:44:28:64:59:2a:11:ef:
2a:76:e8:c8:ea:22:fe:ad:f7:53:47:1f:6c:69:71:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:46:AC:DC:34:0A:7C:A2:31:87:E8:EC:E8:9A:61:B6:DB:AD:A7
X509v3 Authority Key Identifier:
keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:97:27:65:86:4b:2f:ee:85:2f:ab:44:2f:f2:9c:a2:7f:f6:
51:c8:b4:f2:f6:db:e2:52:5c:70:21:5f:6e:42:26:2f:e5:d6:
c9:64:7a:85:4c:8e:ff:2d:91:ec:af:2b:91:f7:f5:f4:2b:77:
f8:65:d4:ed:f8:37:f5:3a:a5:de:ab:98:c4:a0:1d:ac:4c:19:
76:c6:61:8a:de:71:3c:8b:4d:1e:9d:0e:67:08:fe:6f:b7:4c:
a0:b6:1f:b6:1f:58:85:d1:5c:91:9b:f4:88:44:e4:36:3a:4c:
38:ef:ac:ba:fa:d9:6a:ca:b1:72:a5:39:94:0b:17:0c:0d:6d:
df:b9:8b:d1:b4:f7:43:63:45:56:c5:66:b7:84:19:d5:e5:22:
f1:25:f8:93:1b:3a:4a:55:55:7d:bc:cc:10:c0:9c:99:0b:8d:
a9:13:25:1c:ea:43:1e:c6:17:a1:3c:4d:27:9d:97:2d:53:b6:
57:d9:2a:7f:68:e6:fb:15:5a:3e:ff:3d:b2:27:27:8a:1a:b9:
82:d5:c5:4a:be:7e:06:b9:81:59:25:05:d9:86:b5:a2:20:3f:
16:b9:f0:44:c7:df:8c:e3:d5:ed:b9:1a:d6:e0:61:5c:31:37:
29:5e:98:d7:c2:3d:3f:8a:06:27:55:82:38:79:d5:a8:98:03:
a5:34:b0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:02 2025 by rpki-client