Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier: jKOSSGqh+lpcEtQO1HEJ1ssPZ9C9m+DAMOcPKpdAUNo=
Subject key identifier: 07:F6:FB:E9:D4:31:04:03:7A:D4:46:B0:5F:6B:AA:9D:FF:F4:46:72
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 0194BD85A6BB6510E5D45EB4477EDA696108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number: 0166
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=)
2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: 8C1NCuynSdK2tTxvFRKPvKhvx9QZyXlxirJwACvG1hM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a6:bb:65:10:e5:d4:5e:b4:47:7e:da:69:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=07f6fbe9d43104037ad446b05f6baa9dfff44672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:c4:ac:5f:04:3c:66:cb:f3:8b:44:d5:71:
c0:3d:48:c6:7a:a2:66:68:ca:db:c8:b3:7d:da:2c:
fe:92:d9:cb:7d:6b:77:2f:41:15:b1:80:d8:d2:88:
27:0d:66:70:81:49:fc:97:ca:2f:26:77:16:36:41:
85:4a:30:c8:be:35:6f:25:bc:30:18:22:7c:23:2c:
11:d2:ce:d8:0b:a6:6d:9b:d6:12:4e:84:d5:ab:ef:
60:9d:d2:82:f5:f1:12:73:f8:07:89:89:fa:5a:88:
10:97:89:38:5b:e6:e9:15:69:24:c1:7f:fe:3e:51:
75:86:dc:51:ab:98:d1:16:b4:1a:1c:cd:7f:d5:d1:
9c:d8:3b:f8:42:9f:a8:ac:75:23:d9:f4:b9:1a:28:
fb:61:24:73:b0:af:3e:b1:6a:25:b8:79:59:d8:ed:
8d:68:12:f6:dd:ac:46:62:b8:f5:79:f9:1c:d8:69:
0d:92:f7:76:e3:00:d3:bb:fe:ac:97:1a:ad:69:a5:
b5:96:68:b1:bd:8e:70:18:b7:d0:14:0e:db:6e:6c:
c0:94:e8:4a:d7:de:98:bd:0d:88:7a:c4:6e:b4:93:
a4:8e:c3:9c:14:7b:37:aa:64:ef:41:0d:98:7d:cd:
6c:b1:5b:11:91:49:f2:1d:5e:ad:57:21:72:8e:7f:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:FB:E9:D4:31:04:03:7A:D4:46:B0:5F:6B:AA:9D:FF:F4:46:72
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0f:38:85:ea:63:38:3c:77:57:08:d5:c0:b4:2c:43:4a:9c:
44:77:95:4a:c6:62:b1:f9:b4:d4:48:e9:eb:c4:00:fb:4d:60:
e4:a0:ba:9e:c3:fa:06:f0:da:3e:64:a8:8f:e4:1c:99:59:5a:
7e:6d:50:11:d0:d2:ee:23:2c:fe:68:68:85:a6:e8:bc:d5:7f:
0d:1c:90:ff:0b:95:51:7e:cd:39:6a:5c:0d:cc:7b:06:29:33:
d1:5f:d5:bd:ba:0c:a5:00:25:25:b1:f2:0a:33:20:fa:b4:e3:
25:9c:34:d5:57:42:08:2b:90:b1:65:43:7f:7d:92:27:8e:87:
8a:77:8e:67:79:2b:25:70:90:a4:94:f7:4d:a7:f9:26:35:79:
70:cc:55:39:6e:69:b2:62:c8:e7:ed:3b:5a:fd:34:6e:2a:d4:
e1:4a:03:2b:ae:68:1b:91:ae:98:01:39:89:34:77:71:1c:7b:
4e:88:1f:bd:df:19:a5:d7:0e:e1:73:55:ae:64:32:6d:16:34:
c8:8a:39:a1:f0:0f:f0:9e:29:ca:9b:6c:2a:5f:2e:5d:42:a2:
bf:e9:b4:ef:84:a4:dd:f9:72:d1:54:2a:16:a5:48:75:b5:fe:
30:be:18:30:22:0c:70:e2:04:9b:06:28:d3:0d:31:a9:36:0f:
2a:ed:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:54 2025 by rpki-client