Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: dA9TajMigQeGxwC+p9EKIygOmBucebzdEVcRLs04bUw=
Subject key identifier: 33:4D:57:61:5A:97:8E:7C:66:66:AD:FA:D1:5D:AD:D5:0D:57:A8:22
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 0194BCE0D939E19E6AFAFC74A9632B86BEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: o1LYSxkozqrN5sqFNuokOtVkuF0JlDeXsKV9P0jUA3o=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:39:e1:9e:6a:fa:fc:74:a9:63:2b:86:be:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=334d57615a978e7c6666adfad15dadd50d57a822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:dc:82:db:8f:a8:c4:8e:b2:75:2e:cd:68:
5f:70:a4:f1:8c:42:aa:a8:ad:7f:3e:2e:22:70:5b:
da:d1:00:e1:93:ff:23:3e:57:17:4a:83:d7:92:65:
a1:b5:5a:37:5c:ef:2e:43:d5:8c:9e:cb:68:5e:ed:
14:86:f1:f6:c3:82:0e:d0:43:61:f8:21:88:e9:d2:
63:6a:81:91:98:da:de:b1:37:3d:d2:77:26:2e:ae:
73:f7:f2:4a:4a:9a:0e:7d:0b:59:eb:ed:76:82:a8:
11:d2:49:83:b7:ce:9f:71:01:46:80:7a:cd:d6:b8:
5d:3f:a2:dd:79:a9:65:2a:fa:23:6e:cc:43:08:46:
73:29:99:04:7a:ca:5d:11:80:ed:0e:89:25:e5:8e:
a4:b2:43:3b:7a:8d:2b:dd:1b:1a:45:b3:e1:16:2e:
b8:18:e9:78:59:04:77:35:02:2e:cb:64:9c:06:52:
4c:b3:cf:b5:4e:de:25:e3:8c:46:d3:de:16:5d:b9:
bf:0e:5c:a7:b2:e0:10:ba:f6:19:8a:92:0a:df:dc:
cd:14:59:05:46:32:11:8c:26:c3:f2:35:e1:b2:36:
8e:eb:a5:4e:a7:5d:98:a7:55:ca:c5:f2:e3:5d:b7:
48:9b:ed:5d:e5:a6:2f:20:21:75:c8:5a:52:e2:c1:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4D:57:61:5A:97:8E:7C:66:66:AD:FA:D1:5D:AD:D5:0D:57:A8:22
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:72:7f:03:f7:0a:0a:9a:74:98:e2:65:f4:84:0a:51:e9:f5:
3e:da:c1:f6:f5:a6:06:de:ef:67:29:4b:96:f6:c0:dc:15:03:
30:d9:c8:dc:1f:d7:ec:b1:aa:15:75:be:4b:5c:ee:d2:c0:41:
93:d6:cc:aa:b9:d3:de:69:6d:c9:b2:5e:38:b8:3a:8b:9c:d3:
7c:1a:7d:8f:bb:50:a4:df:b7:0a:07:8b:69:94:94:25:11:04:
90:19:b1:80:ec:a4:72:e0:cc:fa:fe:7c:3a:9f:cd:60:ad:9f:
18:60:00:29:01:26:6b:20:c4:0a:ce:ec:88:31:90:88:12:6b:
bf:70:14:73:08:ec:9c:be:a6:d5:4a:18:8b:46:c0:5c:b1:e1:
6a:ca:6b:b8:31:c5:e9:db:56:2c:b1:9e:9b:79:63:ee:53:b2:
a6:2c:b7:2a:67:d5:78:53:bb:c4:19:53:a4:a1:29:b7:44:75:
98:53:5e:73:30:69:5f:5d:54:fc:0c:dc:af:b2:88:85:ab:16:
a1:5c:a9:92:f0:23:86:c0:1f:1c:1c:8e:b9:58:19:38:f9:3c:
53:63:86:3d:2b:c3:ec:ac:eb:bf:a6:fb:03:bf:43:d7:91:3c:
75:e1:55:71:f4:42:59:9e:3a:bd:fd:e1:4f:f6:e8:38:70:be:
dd:64:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:57 2025 by rpki-client