Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.mft
File: 7a03UwFfx-FoKksfd_8k1MDoa1E.mft (raw, json)
Hash identifier: U0DeuTZhmDL3JdEnoUruhfkpCgzDqqYR8kgnTBbRLf8=
Subject key identifier: AA:3D:AD:B1:A0:11:D6:25:23:37:A4:B0:DD:54:CB:9B:64:93:7A:0C
Authority key identifier: ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
Certificate issuer: /CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Certificate serial: 0194436D6C2295CEA0673AB3540580AEC4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.mft
Manifest number: 2B
Signing time: Wed 08 Jan 2025 01:00:31 +0000
Manifest this update: Wed 08 Jan 2025 01:00:31 +0000
Manifest next update: Thu 09 Jan 2025 01:00:31 +0000
Files and hashes: 1: 7a03UwFfx-FoKksfd_8k1MDoa1E.crl (hash: mxq33jKWzm1XgTnCDTCPOQTlnfH68+eY+mV1SWTSHwo=)
2: TeK75aLhTFRdnDBSchLf1dz64Js.roa (hash: k2NRyqj+Y0eEqSGuSHXWAmBSlJ0pdzO5q18O0v2EFkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:43:6d:6c:22:95:ce:a0:67:3a:b3:54:05:80:ae:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Validity
Not Before: Jan 8 01:00:31 2025 GMT
Not After : Jan 9 01:00:31 2025 GMT
Subject: CN=aa3dadb1a011d6252337a4b0dd54cb9b64937a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:ed:16:57:f7:4e:97:53:68:0d:d5:af:91:
c2:19:7c:14:3c:eb:32:ec:9b:1f:80:f4:12:72:98:
95:d1:db:b9:9d:81:66:2e:a9:ea:83:0a:8c:23:2a:
c4:b3:51:7c:f9:67:2b:31:37:32:ce:a6:fa:74:54:
6c:b0:04:53:43:66:3d:a4:91:bc:f8:a7:1e:e8:3e:
c1:4f:b3:6e:d3:c6:ee:8a:05:cb:8c:e2:c6:d8:21:
81:79:1d:64:28:a2:ab:18:27:0a:39:55:4c:97:f9:
bc:fc:9f:40:21:5b:d8:79:e0:74:c7:37:e2:74:f0:
1c:82:b6:3e:e5:f3:95:98:92:0a:04:de:b4:0f:13:
39:a7:48:c2:68:2c:45:6c:07:80:93:91:65:17:b4:
e8:c9:77:5f:7e:8f:46:dc:65:af:b7:f4:98:32:62:
73:ee:37:1c:68:ff:c7:a5:81:c2:1c:c9:7b:3c:66:
1d:67:93:8d:6c:05:c1:68:ac:02:7a:a8:84:52:1a:
d3:0a:df:3d:f1:45:92:64:36:23:20:fb:b2:33:70:
50:dd:b1:8f:83:3d:04:02:5b:85:d5:35:cf:cd:3d:
5c:f2:1d:48:88:eb:3e:7a:14:e1:32:b8:b1:33:86:
1b:df:60:f8:ad:68:78:04:1c:51:8c:dd:e7:7f:64:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:AD:B1:A0:11:D6:25:23:37:A4:B0:DD:54:CB:9B:64:93:7A:0C
X509v3 Authority Key Identifier:
keyid:ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d3:ff:b3:71:cb:16:24:aa:88:80:41:00:b4:db:b9:97:18:
54:55:71:29:01:d3:c6:ce:6b:0b:92:eb:cf:65:09:2e:30:56:
01:0d:08:15:20:ff:c7:6e:89:5d:6f:0c:67:ed:d7:27:21:fd:
3e:f0:bf:12:27:bc:58:2e:a2:0e:cd:e9:91:f6:3d:49:8d:65:
c4:d3:15:94:fe:2e:96:da:2f:15:f7:81:8f:8c:ce:ce:da:97:
c4:7a:3e:e6:fd:af:e9:b3:4c:ba:f4:36:d3:ca:4d:69:90:64:
97:d5:91:9b:c5:b4:21:af:0b:ef:62:83:a7:fd:63:b1:8b:e3:
2d:7d:8e:1a:03:f1:82:f4:22:f6:19:82:90:1b:ce:37:24:e9:
bd:31:b7:34:2b:84:2f:e2:c8:37:8f:09:6d:cd:ca:20:22:23:
eb:8d:45:c7:34:70:f0:3c:21:e9:cd:3a:3a:e8:ea:ae:54:73:
e7:f4:ef:92:5d:a4:c3:7b:b6:76:9a:2a:4b:ff:4c:de:e6:93:
e3:32:d3:9f:40:35:ff:dc:7e:91:5e:38:46:1e:58:95:7b:3f:
48:31:76:42:ef:35:92:0a:ff:4f:49:f6:b8:e8:ea:c4:92:2a:
11:2e:ef:b2:15:fe:78:ea:b8:0f:4f:2d:44:15:93:69:f7:7f:
0c:39:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:52 2025 by rpki-client