Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/e1fkWZ8vsR9A6oWozFaNinD0J7o.mft
File: e1fkWZ8vsR9A6oWozFaNinD0J7o.mft (raw, json)
Hash identifier: qXS1fdY6IuFNHnv9MmWSwz4NbeDg5D/LdEayb/TOLZ4=
Subject key identifier: 43:BC:97:88:75:4B:2C:60:74:AF:54:5E:F9:8C:1F:97:F4:59:3E:6F
Authority key identifier: 7B:57:E4:59:9F:2F:B1:1F:40:EA:85:A8:CC:56:8D:8A:70:F4:27:BA
Certificate issuer: /CN=7b57e4599f2fb11f40ea85a8cc568d8a70f427ba
Certificate serial: 018456A2B2F8014F72D9EA4B8151AC2F29B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1fkWZ8vsR9A6oWozFaNinD0J7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/e1fkWZ8vsR9A6oWozFaNinD0J7o.mft
Manifest number: 0B5E
Signing time: Tue 08 Nov 2022 09:46:53 +0000
Manifest this update: Tue 08 Nov 2022 09:46:53 +0000
Manifest next update: Wed 09 Nov 2022 09:46:53 +0000
Files and hashes: 1: WFg-HXIDmEmCxtSBgXkImxAjaag.roa (hash: q6AS5XADPn8wZ/ezW7AL9zMi0aPNEwEOj9wD7igeErM=)
2: e1fkWZ8vsR9A6oWozFaNinD0J7o.crl (hash: laVWK2nqeh9z461fUDvTzZasQ/kT5u6SPsZKsQrrheM=)
3: l849rx94ZCHNK1ws29jxaJll9FU.roa (hash: bhHIZD1swKnu9JjpaS7Yle0gA8rkSLZpTx3P0zuN77U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:a2:b2:f8:01:4f:72:d9:ea:4b:81:51:ac:2f:29:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b57e4599f2fb11f40ea85a8cc568d8a70f427ba
Validity
Not Before: Nov 8 09:46:53 2022 GMT
Not After : Nov 9 09:46:53 2022 GMT
Subject: CN=43bc9788754b2c6074af545ef98c1f97f4593e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:68:09:f0:88:29:3c:58:f0:65:74:6f:58:
7b:d7:34:42:32:d7:ea:c8:44:02:d7:ed:6b:21:56:
23:94:5c:55:82:3a:d4:2d:be:a9:a6:cd:b0:87:c1:
c4:b8:58:65:c3:cc:01:43:ee:5e:1f:dc:b5:fb:33:
09:80:32:6b:3a:e3:5f:7d:42:7b:a3:80:26:60:13:
cb:49:23:c0:b7:a9:d7:a9:f9:53:1b:5a:2b:a3:e8:
06:23:a5:a1:87:84:2a:42:1d:88:2e:e5:03:84:4b:
0f:d8:df:9c:0f:1d:ca:57:2f:15:2a:f0:d2:c0:50:
c4:2d:33:0d:45:79:31:8b:38:59:81:40:31:af:7e:
b6:84:26:a3:9f:69:0c:65:7e:75:46:9b:38:ae:0c:
e0:ce:3f:12:37:6f:a2:31:16:f3:e2:ae:eb:38:90:
27:7d:98:62:38:35:a0:4f:9c:57:c6:53:50:9d:41:
4b:d3:b0:c2:9e:f8:78:e5:bb:72:4f:e3:4d:fd:5c:
7f:a5:be:9f:db:31:91:28:eb:ee:29:9a:b8:e8:ef:
00:e5:72:04:56:9c:44:82:f5:2e:b3:df:5f:e3:1d:
6d:0a:b9:a6:1e:37:63:30:4e:30:38:65:89:5f:c4:
1d:26:7e:05:ac:6e:dd:95:9f:0a:3e:b7:2f:a3:6d:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:97:88:75:4B:2C:60:74:AF:54:5E:F9:8C:1F:97:F4:59:3E:6F
X509v3 Authority Key Identifier:
keyid:7B:57:E4:59:9F:2F:B1:1F:40:EA:85:A8:CC:56:8D:8A:70:F4:27:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1fkWZ8vsR9A6oWozFaNinD0J7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/e1fkWZ8vsR9A6oWozFaNinD0J7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d13eb2-46fd-416a-b661-9f9374fcdb06/1/e1fkWZ8vsR9A6oWozFaNinD0J7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:33:4d:04:78:11:d2:3a:4e:c9:a3:27:6c:3d:41:76:d1:a0:
e3:07:fe:5b:c3:65:4a:45:75:ac:cb:5f:49:1a:47:c3:9c:32:
80:a2:22:27:24:a0:08:06:88:e9:8e:b9:81:b3:22:46:c8:4a:
52:cb:30:3d:1f:c0:27:99:73:63:a9:3f:e6:b6:d9:88:e1:e6:
8b:b5:fc:55:df:49:b7:ae:94:d4:fa:8b:13:b5:eb:35:76:04:
50:b8:51:06:99:90:74:07:f6:e6:a4:64:5f:a4:ea:2e:5c:87:
18:69:49:54:8a:cd:f2:c9:6b:c9:db:44:8a:40:0a:a9:85:8b:
8f:f6:41:8f:1a:91:fd:d1:fb:04:99:c6:f3:bf:fe:d5:6c:65:
e3:45:5b:0d:76:4b:38:56:ea:4e:f9:b8:d8:d6:f5:eb:d1:b5:
9b:92:ac:0d:ec:cd:f6:b8:a3:1a:d4:72:0a:9f:ca:51:46:29:
a4:ff:bc:dd:6b:41:c4:2d:eb:f3:4a:3a:f0:b5:9d:ea:0f:28:
92:c2:be:f2:cd:25:80:c1:3a:f3:b3:1f:7d:e9:c2:99:a4:3d:
bd:e1:bd:79:b7:6b:3f:32:d8:31:4e:6e:09:2b:fa:60:0b:80:
ee:c5:cd:8a:c5:c1:c5:85:21:83:d0:0c:dc:b1:84:6b:c0:93:
e5:94:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:10 2025 by rpki-client