Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: h9/MaZFI/EOe/FpbIJZK5IeWskN4yJyfq7yhYNlL3/w=
Subject key identifier: CF:BA:1A:C0:CD:B6:22:02:FB:3F:D9:1D:01:AE:A3:78:C2:17:E4:6F
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 0194BC3BF932CBBE7BF4626BAE755C40F9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 02E4
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: vCF6Y6orez1S9eWPytoBXTUuR7GijuI+xgDpXce5PDM=)
2: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (hash: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=)
3: r-plRi1ZpgmWnu-urPIdYNrFFFU.roa (hash: DxecFcu5t+xZ0qqmbJOm2zril/rb62HI5wbo3Djm3yQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:32:cb:be:7b:f4:62:6b:ae:75:5c:40:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=cfba1ac0cdb62202fb3fd91d01aea378c217e46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:09:a9:f4:16:17:f4:36:fe:5b:d6:07:8d:
80:07:93:12:e1:9b:cb:e2:bc:03:cd:2f:1e:15:2a:
91:0b:c5:38:9c:f2:86:1c:1a:4a:a7:bc:29:2d:f9:
7a:e0:74:8d:b7:98:dc:32:88:07:ba:7a:f6:76:52:
a1:f4:94:ec:02:d9:72:cf:19:51:8c:52:5d:7e:a2:
0d:de:6c:e8:2e:87:9f:94:d2:2c:c8:eb:0a:08:cb:
a3:b8:b6:a1:fb:a1:e4:0e:51:c0:60:31:2f:fc:7d:
de:3e:22:90:87:61:c9:2b:4c:43:78:81:63:8c:4a:
44:08:62:26:8b:d3:17:44:97:48:36:43:53:a0:dc:
e5:70:d4:00:0b:3c:66:90:c2:61:94:d9:0f:22:91:
66:e1:26:8b:6a:27:59:d5:d5:e4:a1:d1:bf:5e:ee:
8c:e9:1f:80:a2:3b:bc:5c:3d:f1:66:f7:7f:a0:bf:
72:a2:0b:f4:cf:7e:8c:50:85:a0:8b:b7:0c:3d:97:
c3:f7:08:46:34:e2:2d:b1:cf:2c:e8:fd:8c:8f:ae:
14:9f:2a:12:a2:d4:f9:48:8d:1f:91:dc:ba:0a:c8:
6f:ad:27:04:b8:7f:36:ed:52:af:b2:a9:7d:e6:03:
ee:13:02:fa:26:2b:8b:71:9d:91:49:a3:41:b9:af:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:1A:C0:CD:B6:22:02:FB:3F:D9:1D:01:AE:A3:78:C2:17:E4:6F
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:80:c3:78:8f:39:14:2c:29:58:0f:a5:87:0f:f3:08:8b:f2:
47:c3:ae:80:97:b1:9c:8a:74:5e:85:b5:91:c3:75:11:7c:4d:
25:0a:9d:9a:87:f7:fd:da:2a:56:28:63:eb:28:f3:21:b4:8d:
22:6d:90:71:c4:3d:f8:02:74:0b:f4:a1:ee:a2:54:66:50:69:
87:6b:31:5c:ef:b7:22:b6:cf:a7:15:11:a9:33:59:3e:69:4b:
96:6c:e2:3e:20:7f:5e:2b:95:e8:79:79:4e:e7:f5:70:ff:84:
22:13:db:2b:05:1c:ab:8f:f1:3f:79:67:2d:19:63:91:f9:62:
02:e9:c5:c9:a9:b4:15:60:cd:fd:f3:83:9d:a5:22:f3:91:cb:
9a:d6:34:82:c4:2e:48:66:c2:2d:65:3b:87:90:91:1b:e8:d1:
b8:16:42:2f:d8:93:65:24:da:70:cd:6c:1c:e6:d8:c6:c5:b5:
9d:bb:79:82:14:8a:89:2e:4f:75:a7:a7:53:7c:a3:91:e6:75:
be:3a:26:a6:51:f6:5f:a0:14:f9:6c:a0:29:b8:b1:95:00:2e:
74:08:bf:70:8c:61:c0:5f:3e:ea:24:fd:e9:03:23:37:d8:b6:
3a:ed:f7:d2:e1:d9:e4:59:c8:e5:90:3d:c5:f4:78:fe:0e:c8:
15:8b:2f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:13 2025 by rpki-client