Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: s8l3OtbhjvU2xy6Qc2EiZ1ulCKn+dddXzZ8R8iBA31g=
Subject key identifier: 3E:5D:2C:4E:AB:37:23:B1:6D:17:2A:4C:40:91:86:85:EB:20:04:44
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 0194BC053A79482238701EFD3B2CBCA0F83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:46 +0000
Manifest this update: Fri 31 Jan 2025 11:00:46 +0000
Manifest next update: Sat 01 Feb 2025 11:00:46 +0000
Files and hashes: 1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: WSvmSKfl2X+ACcBIxws/BcLphtTj1oyl0uMpwC9aCoY=)
3: uMjCl_PriLh85OmMbuJ_inva0T4.roa (hash: 57KGlW+XaNJVXeshyO6M89WDia1kHSpdy9vh0pogTSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:3a:79:48:22:38:70:1e:fd:3b:2c:bc:a0:f8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Jan 31 11:00:46 2025 GMT
Not After : Feb 1 11:00:46 2025 GMT
Subject: CN=3e5d2c4eab3723b16d172a4c40918685eb200444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:1f:5f:ac:a5:30:42:32:3b:b6:e3:94:76:
3b:95:15:75:43:e3:f2:45:dc:ca:23:63:9e:35:d8:
8c:ef:aa:90:bf:84:ce:26:19:e7:96:df:2b:d0:2a:
6f:da:ce:23:9a:3e:c3:6f:40:da:70:e5:24:14:d3:
ed:d0:f0:20:1d:47:84:22:75:a7:0c:79:2f:78:5c:
78:82:36:35:91:28:37:dc:98:8e:ca:f1:ca:62:72:
2b:7e:5c:16:24:58:28:18:02:46:63:7a:e0:8c:ee:
87:a4:b7:11:c1:c8:b8:d6:2e:42:2e:8f:bc:b5:f7:
a8:4b:d0:71:b1:b9:95:b7:24:18:d4:87:89:a3:e5:
4a:bc:e1:17:13:b0:cb:68:a2:54:89:e0:86:fa:a2:
9e:48:81:ce:50:7d:c5:90:5f:0c:bd:85:96:e0:ea:
94:fe:16:1f:8a:32:84:f6:97:7e:b7:c2:c6:d3:b2:
8a:48:c5:5a:12:cd:1f:6b:19:e8:76:d2:b7:09:ba:
78:eb:d5:37:bb:bc:b4:6c:cd:ca:a5:b7:a0:8b:d7:
70:0c:aa:6e:65:95:58:f2:4e:47:69:10:f8:6b:0f:
93:2a:49:61:ae:35:00:18:c9:d5:e3:63:83:8f:04:
79:e0:b3:4f:05:95:2e:e1:b6:51:74:38:0d:d4:b6:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:2C:4E:AB:37:23:B1:6D:17:2A:4C:40:91:86:85:EB:20:04:44
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e5:93:36:d2:f8:23:d2:96:dd:50:3e:07:74:a5:b3:8d:c6:
95:cd:ff:ba:22:95:0a:26:8a:e1:4e:1c:82:97:c5:1e:ba:19:
6a:6f:34:8d:fc:b0:52:a8:70:63:86:11:7d:5d:f9:a5:a4:81:
0f:64:ba:0e:98:cf:f6:68:66:2b:99:db:47:8a:17:24:a7:7b:
2f:02:98:f6:bc:db:6e:13:98:bd:bf:89:6b:7e:45:29:78:16:
ab:1d:3e:59:ae:9c:9f:d6:94:f3:32:b2:96:5a:fe:73:71:c8:
4f:45:e4:d5:e1:f5:9d:30:4f:9a:e6:a6:80:10:4c:1f:0f:92:
0d:12:d5:d7:74:3a:08:5f:1a:c9:e6:9c:23:00:61:0d:d3:bf:
bd:26:ce:e7:2a:96:e0:f1:66:bf:5d:07:80:84:ed:e5:9f:d1:
d9:7b:e3:40:ef:67:80:31:7a:12:ca:2a:13:43:45:9e:16:a9:
fc:a7:5f:f0:e2:9d:db:bc:2a:17:b6:be:83:45:97:56:ba:20:
6a:37:cd:8a:44:fb:74:13:cd:f8:f1:c3:de:72:76:5e:80:5c:
ff:14:ea:14:2a:ea:63:93:52:84:07:46:ff:97:e1:9b:94:f7:
45:39:81:a0:92:01:05:ae:36:6e:a4:3e:a2:34:50:c4:68:ef:
61:8b:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client