Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json)
Hash identifier: eTMzI4+I4tGd3whLREGxTlZQ6TPptffEulBVrrBb84E=
Subject key identifier: E0:AB:A8:8A:2C:73:28:5E:A5:56:5F:27:6E:0C:BC:83:A2:72:31:72
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 0194BCAA364F2A728B40A232148490CB499C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
Manifest number: 07B1
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: _kQghqoSb_X-J1eU6Veg5jZb_lM.roa (hash: orSjRm3BUlA0zgYAAY5tZI6SycvEHAlos/+pRkt9kWw=)
2: dPZsSvYtCvyZQ4wUL4AcexgoZFc.roa (hash: 2RcCp227RfOhnbvJ4SKdXvicp2GHuqovrMQjshuTQr8=)
3: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: /3Wf92HSYtRYV2V6zV8VONavRARPsE0J5hxjEYzcuBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:4f:2a:72:8b:40:a2:32:14:84:90:cb:49:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=e0aba88a2c73285ea5565f276e0cbc83a2723172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:86:82:f2:bb:35:d2:c2:a9:1c:a6:73:b3:
21:5b:39:8d:70:eb:3f:b6:ad:99:22:8a:23:89:55:
9b:ec:2e:7d:38:5c:8c:c5:7a:ac:6c:51:94:53:8a:
fd:a7:cf:30:dc:3f:31:43:6f:84:a1:6d:1f:47:78:
e7:f9:b7:48:63:81:6a:80:c0:e9:8a:d3:e8:10:0f:
f6:92:e7:e7:16:a8:c6:86:dd:b2:1d:17:03:99:f3:
23:01:a4:f7:59:d7:d5:f4:25:ea:e3:19:72:7a:df:
1b:9e:a6:48:48:0b:d0:95:a5:2f:2b:54:6c:af:ca:
ba:a8:f4:44:7c:a4:86:15:0e:b6:fb:11:ca:56:9a:
ba:1b:c7:2f:2b:71:55:20:f0:54:13:0a:ce:8e:04:
ef:87:cf:49:74:c9:2f:6e:d3:74:4e:71:cf:17:e1:
f3:55:d1:4d:e5:9a:f6:65:52:4f:bb:2a:9e:3a:30:
01:94:d2:9d:c0:46:2f:80:40:8e:de:d1:8b:5e:b5:
97:a8:c9:c1:ed:6d:7e:34:7e:2e:1a:80:55:35:ce:
0f:45:ab:a5:ca:0b:95:74:51:c0:af:2d:f3:af:89:
68:1e:0a:c4:dc:a9:31:f0:7c:e7:09:9f:af:1a:93:
6f:a8:cf:a5:45:da:33:ac:6a:96:cf:ac:6d:bf:14:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AB:A8:8A:2C:73:28:5E:A5:56:5F:27:6E:0C:BC:83:A2:72:31:72
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:ff:1f:c9:b2:c1:59:85:70:54:65:24:1d:bb:82:95:99:
a3:44:ff:c7:16:14:ba:83:29:3a:02:11:c6:e4:63:8a:27:31:
ec:08:80:5b:83:eb:58:5c:59:f7:04:67:95:53:15:0f:21:37:
f4:13:15:0c:46:53:a2:6a:06:14:29:b0:e8:ed:2f:42:27:10:
07:af:20:a3:b5:c5:9c:33:c0:b1:f2:f3:0c:8c:68:0f:1a:92:
f4:4e:09:79:8f:6b:4b:ba:c8:66:93:83:00:ae:c8:bf:c2:f9:
2d:f1:ac:07:29:73:5d:f9:24:e8:94:b8:3b:8e:b3:12:df:a4:
ea:50:75:08:da:3b:86:9a:21:32:af:dc:d9:8a:7e:a5:07:1c:
c4:bf:eb:c0:a8:6b:80:6c:39:d6:e1:39:ca:d5:af:95:51:88:
f9:f2:f9:33:bf:b2:ed:61:48:b7:be:6b:97:76:8d:18:11:8c:
e9:5e:da:67:6a:69:40:af:cd:da:8a:e1:3a:20:03:73:61:7b:
c5:e1:c9:fc:d0:0a:6d:7c:72:f9:cc:38:39:d1:4c:64:d9:ae:
28:f3:5d:ce:7a:d4:a6:d5:7b:b6:65:19:f3:ae:3d:b3:58:87:
42:f0:60:4a:a3:85:cd:05:11:cd:f6:63:5b:7a:31:7b:61:d4:
e3:a1:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:19 2025 by rpki-client