Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: 451Eh6N1VzxVmfWPef7PmFbxI7gruD1mgM9+l+1TEEI=
Subject key identifier: B6:D3:78:8A:1D:71:1E:62:D1:CA:CA:B7:4D:0D:B5:75:49:6E:F0:E6
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 0194BCE0CAD0F7E827BCF9946E2AF8FFF198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: Zdd5pvaz2rK6Rx8UY/9svA/A8D0FZ+SmqostZaia7Z0=)
2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ca:d0:f7:e8:27:bc:f9:94:6e:2a:f8:ff:f1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=b6d3788a1d711e62d1cacab74d0db575496ef0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:30:55:88:a5:c1:58:99:b4:7a:cf:40:14:
53:3b:c5:b4:1f:be:eb:4e:85:5b:b1:5e:b0:48:14:
7b:bc:31:1a:39:a0:34:e2:b5:bb:d3:aa:de:d4:c6:
49:f1:4e:28:6b:54:e4:a2:46:86:03:cc:23:8c:a3:
2e:1e:8e:fe:8e:6c:e7:89:79:73:d5:c1:52:90:92:
bd:81:19:c0:4d:2a:4b:f6:bf:49:3d:06:91:e0:e4:
c0:f0:b3:7d:14:02:b2:24:9f:c7:f4:ed:a3:61:af:
ec:ec:65:dd:86:32:58:48:2d:3e:51:de:7f:36:0b:
c2:c4:e1:a4:fe:2c:6c:80:6d:f0:68:20:35:3e:39:
3c:ca:37:1b:19:0e:e4:55:70:ba:94:6d:95:b7:cd:
f8:fb:a4:33:01:10:87:04:3f:3a:3f:68:47:1b:52:
b7:ed:ad:d7:bd:46:3d:49:d0:ee:1b:29:9a:27:9c:
f5:bb:8a:d7:1d:1a:59:50:0d:88:41:35:7a:11:40:
8a:83:c9:fb:59:80:2c:e8:d6:d0:81:b1:be:f4:c8:
cb:9b:2a:23:c7:e2:02:03:1f:09:0c:1d:be:e6:df:
65:9d:8e:4f:30:d3:7a:e4:b9:65:0d:ec:be:2b:0c:
30:fd:a1:15:b1:65:ea:d2:3e:e9:96:c6:7b:ae:95:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:78:8A:1D:71:1E:62:D1:CA:CA:B7:4D:0D:B5:75:49:6E:F0:E6
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:92:a2:f0:18:e8:5e:b6:32:cf:cc:59:ee:ba:4b:9f:d2:d1:
55:94:93:09:e6:a4:b5:0b:fb:56:01:3d:10:66:7a:e3:73:e9:
9f:45:a6:b8:2f:90:db:bf:d2:30:f4:3d:66:0f:cd:78:dc:15:
33:5f:4b:e2:fe:87:ed:b8:34:f7:c9:d9:bd:ee:ba:d7:bf:38:
4c:52:f8:2a:66:16:86:3d:0f:b9:87:a7:37:51:ab:c6:d5:08:
c0:0b:3b:44:91:17:76:10:a9:95:57:e7:8f:90:23:83:a5:26:
f4:c2:ea:65:c8:35:a3:c8:53:62:3e:e5:b2:30:cf:93:bc:98:
63:95:1d:17:0c:30:c2:98:d2:db:90:71:ea:21:01:3d:49:6d:
7e:9c:1b:09:b6:26:95:65:21:03:54:83:52:70:64:16:df:7b:
d4:d8:c8:23:26:6c:ac:d7:97:f3:f0:39:9e:7f:4f:34:61:e2:
ff:29:32:20:95:0f:1c:c5:c0:d0:b9:93:fe:43:50:ec:7f:83:
5c:6b:1e:75:3f:f2:95:3c:ff:c6:f9:7c:04:96:dc:24:7b:92:
b3:86:d6:2d:de:3f:de:55:de:e7:fa:1b:ff:e7:67:b2:b7:9a:
af:28:a3:bd:70:f3:08:ef:a0:9c:9f:49:9a:5a:9f:6f:f1:2e:
2a:fc:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:24 2025 by rpki-client