Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: E+XOMnF8Xg3K4uADRkRrGlK067TznzMpDgRM/2VGdh0=
Subject key identifier: 2C:54:B7:6F:D7:59:D0:96:8C:43:9F:FA:4B:EA:F9:35:0C:E7:1E:F1
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 0194BCA9C4B963FF247E1EDAED077B801187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 0710
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: YB8jVOFviEL0yo4kf56Rk3kWDHvQjFuhWg4n+9SpAFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:b9:63:ff:24:7e:1e:da:ed:07:7b:80:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=2c54b76fd759d0968c439ffa4beaf9350ce71ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:50:64:6b:ac:d3:32:3e:a2:0e:1e:07:34:
18:2d:59:32:18:11:2d:26:75:3b:30:21:17:6b:7a:
6f:4b:de:36:95:4f:95:46:d8:ff:70:2b:04:fa:1a:
a1:11:e5:c3:21:86:ed:ac:14:05:de:e3:91:77:6c:
a1:3d:1e:40:d9:83:17:ca:5d:40:93:ad:ae:bd:5d:
f6:af:67:fa:a2:34:07:b3:29:83:96:3b:51:19:10:
21:c9:e6:63:c6:87:e1:cb:e6:d8:cc:6b:e5:f7:a7:
65:0f:d3:2f:56:fc:6d:d6:7c:e7:8a:f3:77:39:b3:
ef:19:7a:0b:d4:5a:af:41:4a:46:91:76:b1:e6:f4:
66:1e:18:c6:b3:54:ea:35:39:0c:1d:44:0d:a7:65:
b7:48:11:f1:2b:46:8b:e1:8a:a4:cd:8f:16:f2:d9:
be:b9:ee:8a:3f:5e:a3:dd:a3:d1:af:c2:a0:ed:95:
e2:6e:42:ff:bb:ad:e1:77:d8:e2:3d:42:fe:0a:36:
46:59:86:2b:e0:4c:54:67:29:4b:5d:8d:72:a6:8b:
54:e9:5d:11:f4:21:07:8c:0d:07:97:f9:46:1a:c1:
ae:2a:fd:e6:5e:1d:50:5b:16:fa:dc:bb:2e:0a:07:
a1:98:ef:58:6b:47:14:b8:d5:89:4d:2b:f9:b7:6c:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:B7:6F:D7:59:D0:96:8C:43:9F:FA:4B:EA:F9:35:0C:E7:1E:F1
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:af:af:f9:7d:98:2c:e8:91:0c:a0:76:4f:4e:f2:e2:10:88:
06:95:22:cf:27:e5:44:90:2d:c3:56:85:dd:dd:b9:2c:fb:77:
29:70:ab:ad:de:71:d0:4f:4c:25:4b:f2:f7:35:9a:98:60:f7:
16:0a:b8:03:3d:51:14:b2:45:3a:73:fe:68:f3:c8:01:55:db:
14:46:8d:87:09:ba:05:72:90:61:e0:66:3c:69:53:b5:4a:76:
af:31:b9:38:5b:6c:75:a1:29:c3:75:2a:dd:a9:64:3a:46:22:
58:d7:89:c7:e9:6b:b2:b9:51:f2:83:8e:84:b5:5d:2c:42:13:
1b:04:77:98:71:de:0c:44:ad:38:31:31:ac:b6:3d:65:ba:a0:
45:f2:45:11:42:ff:19:29:3c:f4:0e:c7:ce:0f:62:e5:a5:f6:
96:aa:2a:a3:4a:70:cc:d0:17:13:43:b2:74:83:33:d5:e4:a8:
e6:51:77:37:4d:95:c3:7d:d1:87:f8:69:02:7d:68:bc:c1:95:
d7:b2:ef:35:c7:02:df:54:6b:10:9c:38:1b:1e:c6:c2:69:e7:
e3:f8:06:2a:0a:ab:d4:57:c4:bc:51:58:55:77:7c:f6:90:88:
a1:ff:f2:4c:5f:a8:2c:38:9e:8e:8c:8c:cf:8e:ea:0e:43:62:
9f:db:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:42 2025 by rpki-client