Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: RtQfOb75vJ+6BieA7tWKEOK/Gz6gcqiTJ2cr408KKd4=
Subject key identifier: F2:0D:E7:77:8D:B6:2D:26:55:EE:A8:B7:89:0B:EE:BC:EA:2E:B1:1E
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 0194BD85444F652C9DDEEA24A1043FA4ED98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0AAC
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=)
2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: u006J8X1bQy/d1nlFymXr/EbAJi6pf14iAdQOoK6aN8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:44:4f:65:2c:9d:de:ea:24:a1:04:3f:a4:ed:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=f20de7778db62d2655eea8b7890beebcea2eb11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:c6:08:49:0a:07:65:a8:72:0f:c9:c5:ca:
8e:0c:34:91:cf:02:9e:9e:20:c6:f2:8a:06:d4:5a:
1a:e3:d9:14:be:64:1c:10:b4:0f:d4:4a:11:60:02:
51:1f:66:ab:f9:13:d9:df:06:ef:22:1d:a2:18:a6:
4a:2b:a5:19:b6:0a:a5:75:96:40:6c:e0:c7:ab:63:
ae:85:1a:7e:4f:c2:95:a1:d7:47:b4:33:0b:13:9e:
73:d7:3a:0f:56:3e:a2:fa:e4:46:d4:76:33:0d:d3:
0c:cc:03:b0:fc:cc:a3:f3:2b:57:3a:91:8c:d7:3d:
bc:80:dc:86:6e:dc:5d:2a:74:a3:bc:1c:c7:3d:f1:
9e:79:70:b0:b5:e8:f3:df:d3:13:47:a6:15:85:d0:
70:b2:80:26:f7:1b:7e:d3:14:e1:b7:24:ee:59:87:
c8:20:41:ba:00:9b:29:3d:fc:95:d4:b9:68:ab:b9:
5b:2f:48:41:a3:c8:4c:26:c5:91:29:cf:d0:b0:49:
13:15:fa:d9:f2:b4:11:ba:af:b1:39:80:57:3f:27:
2d:dc:1b:87:d9:fd:34:6b:07:c7:e4:4a:a0:c5:7e:
fb:f7:1c:13:26:eb:8d:8e:58:59:bc:ed:ff:70:06:
ce:18:c0:ea:ad:c5:96:80:ad:1a:9c:be:74:cd:b2:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:E7:77:8D:B6:2D:26:55:EE:A8:B7:89:0B:EE:BC:EA:2E:B1:1E
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:be:51:17:09:5a:d6:e8:8f:2e:aa:31:d0:e5:2b:00:15:da:
45:41:84:65:3d:e9:1a:4c:5d:47:e2:2b:46:16:19:2f:c0:a7:
9f:fd:50:cb:1f:f5:8d:cb:c1:0b:34:39:3f:b4:08:a9:2d:b8:
c1:b2:bd:00:c9:3d:dd:6b:98:5f:a1:5c:86:94:ce:a4:d3:19:
08:88:d1:1d:e7:25:2a:c8:94:5d:5c:f9:84:62:42:ba:f8:24:
7b:05:cc:ef:27:f9:3a:38:aa:5b:8c:8b:3e:9c:ae:f4:7d:a7:
4b:1e:b5:84:72:50:1b:fe:67:c3:37:e2:ab:cd:cb:ef:12:5a:
3c:fa:48:39:a9:ec:14:ec:9b:cf:e6:ed:41:5e:5b:8f:ec:e2:
38:e1:3c:23:34:94:fd:af:98:67:7f:b2:43:55:89:76:85:76:
89:9e:55:6b:b6:d2:7a:ab:91:02:33:4d:49:43:52:f2:2a:83:
df:a4:3d:64:b9:3d:b3:61:70:b4:41:f3:a0:46:86:01:8d:14:
76:57:75:d3:d5:a3:e4:f1:26:d0:c0:04:96:2d:ed:eb:d6:54:
13:15:b4:20:3b:fb:46:72:e4:d4:49:57:af:8c:9f:15:57:c4:
2c:67:6d:0b:c3:57:e4:4c:fb:a5:f3:80:c2:30:42:58:d3:23:
73:8f:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:45 2025 by rpki-client