Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
File: b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft (raw, json)
Hash identifier: udUqN4EmiS20xZN1bixZq7z++gMMbzya4YyKzfpesaE=
Subject key identifier: B6:3B:B8:DD:16:15:2D:DE:BE:0F:B6:8E:CF:0C:D3:7B:87:9B:82:72
Authority key identifier: 6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
Certificate issuer: /CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Certificate serial: 018E31776265B2112C27874F2FFE648762CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
Manifest number: 0289
Signing time: Tue 12 Mar 2024 07:01:31 +0000
Manifest this update: Tue 12 Mar 2024 07:01:31 +0000
Manifest next update: Wed 13 Mar 2024 07:01:31 +0000
Files and hashes: 1: FGR8E0ReHVS6x6_a_Y_PoJxl_H4.roa (hash: 2VPc3+k14YDj+VEpbWgXk3gPVop/bti9KbQmxBYKhTk=)
2: b7bLx9H-XmgSUB8MJZbfY-9fyOY.crl (hash: dXNpRZAt0LDHufqCX/SacIRorcyAisasjKW/7/9JM8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:77:62:65:b2:11:2c:27:87:4f:2f:fe:64:87:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Validity
Not Before: Mar 12 07:01:31 2024 GMT
Not After : Mar 13 07:01:31 2024 GMT
Subject: CN=b63bb8dd16152ddebe0fb68ecf0cd37b879b8272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:a8:1b:8b:a7:c0:5c:f5:10:1f:b5:75:a6:
82:73:8f:37:43:98:04:8f:10:45:11:5e:42:f3:27:
c6:ca:e3:66:68:a1:30:b9:11:80:83:8f:42:8a:44:
9d:f0:65:e2:5a:cf:80:c0:47:71:be:6b:c6:e6:ca:
9d:93:b5:fe:5e:19:4c:2c:c0:cb:30:ea:fd:a4:2a:
42:8e:09:ce:99:87:e5:d6:72:7d:14:10:f4:2c:f7:
18:8f:09:bd:10:57:4b:39:b8:f9:18:88:86:80:9b:
d0:85:53:a0:9e:e5:fb:f2:d2:81:a3:4c:f6:b5:83:
a8:0b:a5:fa:1d:9d:9b:3a:ca:46:dc:1a:f2:92:52:
bb:11:4f:10:08:70:35:26:d3:11:d6:d5:03:31:71:
74:96:17:8f:1b:94:d7:05:2f:8f:dd:64:54:d2:71:
84:c5:3e:d5:de:fb:7a:90:6a:33:dc:61:99:0d:9e:
76:ce:e4:5c:9d:3b:9f:37:d2:3e:5f:96:13:87:86:
43:1d:4a:cf:38:0e:ff:38:14:e5:95:8d:89:92:1d:
5e:92:93:04:8e:79:86:58:6b:b2:6d:d4:e2:c7:d5:
cb:64:b1:38:01:fe:9b:6d:9f:5e:a5:ce:4e:18:7d:
bb:50:77:cf:bb:0d:87:6f:25:e7:a1:49:28:b1:0c:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3B:B8:DD:16:15:2D:DE:BE:0F:B6:8E:CF:0C:D3:7B:87:9B:82:72
X509v3 Authority Key Identifier:
keyid:6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ef:03:ff:5d:aa:bf:38:80:15:c2:53:15:b2:cc:26:d1:db:
43:d5:c0:2b:98:00:df:0f:a4:4c:d5:0f:15:5e:e4:67:1b:75:
dd:af:cb:30:04:61:bd:22:10:19:78:57:ec:d8:b8:e9:7f:19:
e5:17:e6:b5:7c:c4:95:e3:10:86:17:01:4f:70:e1:b9:73:78:
f8:53:6f:fd:ed:e0:79:85:cf:36:3e:40:e3:74:e5:f6:11:6d:
82:28:80:26:89:66:67:ba:8c:d5:c6:b1:85:76:69:b9:e9:55:
8a:cb:6c:97:4f:d9:6d:66:25:08:05:de:d5:a7:f7:ea:80:44:
52:4b:5c:45:e6:38:87:07:72:98:fa:07:0f:01:24:5e:ad:b1:
86:2a:7a:49:6e:cc:72:ad:b9:c7:96:96:5f:81:0b:9a:99:cc:
0f:d8:6f:bc:a2:e6:70:0e:6e:f4:83:02:09:c2:5e:b5:f9:06:
a8:fc:7c:4f:4a:53:ed:b4:9c:c4:7a:96:1e:fc:13:30:1a:23:
ec:e8:32:f1:da:5b:cd:5d:b9:1e:87:08:92:0b:ba:47:e6:58:
ff:a9:cb:8d:e8:78:ac:62:36:ca:0b:1c:5f:e4:90:83:b1:f6:
bf:ff:2d:2f:ae:f4:5f:85:76:50:8b:49:22:4c:da:e2:7a:fe:
4b:d7:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:00:17 2025 by rpki-client