Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: dOmsX9ei+FbFpoH8sEnShpAbgCISRtVYXVCpbkhbP/g=
Subject key identifier: 73:1B:5D:9C:95:19:2C:D6:9B:29:5C:AE:89:DD:EC:A7:80:2F:C0:36
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0194BCE0653A44642550BAEEA9004457F836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: njMw4P4LfKQFOZZCdqa1o+cpiJm6oclRMMCj2Y9XR1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:65:3a:44:64:25:50:ba:ee:a9:00:44:57:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=731b5d9c95192cd69b295cae89ddeca7802fc036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:62:87:7e:67:1e:7b:94:9e:a6:2a:b3:17:
70:55:10:76:81:88:49:a2:95:cf:fc:6e:f5:5b:0a:
cb:1f:23:66:57:5d:f0:9f:41:0d:08:9b:0b:7a:8b:
20:16:13:38:7a:e3:62:fc:3a:08:8c:28:9e:23:40:
16:00:f7:0c:97:c2:7e:04:1d:52:21:5b:33:05:2a:
f5:25:f5:95:38:e1:5b:f0:fc:39:78:26:ba:4f:7a:
72:74:5f:e7:a8:7d:93:8e:50:10:e0:34:ce:b3:cd:
be:74:fc:ce:45:bc:8a:f2:37:8a:cf:20:bb:ef:6d:
70:a5:70:69:32:40:1a:78:94:14:81:7a:18:44:eb:
22:11:6f:48:93:4c:e8:5e:d4:d6:09:f8:71:d2:e7:
48:d3:8e:68:bb:a6:1c:a7:f4:cd:06:5a:ee:4a:bc:
36:55:8a:85:81:56:60:30:93:81:96:8a:31:51:6e:
b4:dd:dc:a3:a0:99:9a:ad:0f:5e:af:68:dd:cb:42:
ed:64:68:12:bd:58:13:7a:73:54:e0:1f:04:bc:01:
95:ae:17:93:50:fa:c3:c0:67:dd:27:82:c2:23:77:
3c:22:00:d6:59:55:7c:91:21:67:99:1e:8e:81:60:
c8:d0:f9:c2:91:aa:f8:b4:7c:eb:fb:00:74:cc:c6:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:5D:9C:95:19:2C:D6:9B:29:5C:AE:89:DD:EC:A7:80:2F:C0:36
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:6f:d0:bf:64:f9:18:e6:63:99:68:79:eb:bc:f5:ce:81:
f9:09:a9:2f:7f:d4:04:ec:d5:aa:1a:21:49:b6:d5:49:bb:5d:
8c:9a:c3:4f:5f:73:da:7f:dd:79:51:a8:c7:a6:07:d6:6a:a4:
e9:0c:ae:9e:89:d5:28:ea:5b:ea:c1:7e:7c:41:10:ad:6a:1a:
2d:1f:c5:9f:3b:37:32:0b:75:bf:9c:85:a8:07:35:b5:7d:cc:
f4:58:ec:a2:43:00:59:40:bd:b9:4c:3e:c0:aa:95:fc:6a:6c:
16:f3:bb:60:af:d6:e7:37:c5:3c:e9:79:5c:29:8a:76:c4:2c:
93:87:9f:e9:a0:85:a8:5b:17:e7:7b:d1:68:7a:aa:b4:c5:71:
4d:ba:ae:67:04:e8:bf:8f:95:c2:9c:ef:95:30:3f:21:d2:42:
fc:d0:c7:72:a9:ae:1e:a4:39:42:a1:0f:6b:7e:29:f7:51:f9:
3f:eb:6c:e1:bf:60:49:7d:f6:a9:7c:5c:44:d3:31:32:c5:f5:
fd:01:06:ff:24:58:9c:c3:49:bc:7b:2b:c5:3a:3d:70:c3:64:
93:21:54:c6:c1:65:df:0c:94:ff:40:ee:32:9b:79:4a:d1:ff:
09:c8:55:97:0a:09:a9:28:20:e5:49:6a:10:a9:6f:72:d5:f3:
1a:19:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:19 2025 by rpki-client