Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: JLQr9FTqQjhpf8sl0ChsxKI65VGH5tP0aXTtT6R9oDE=
Subject key identifier: 37:D7:C5:50:F7:1A:1E:AB:45:A8:AD:03:42:F7:8B:0A:1D:F3:55:4A
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 0194BD4E9F038257BA0EBC95E2918862BB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 03AB
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: 8/41ADB2zARQcejCRZk2jQUGALqoxzJWNwoS042bqhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:03:82:57:ba:0e:bc:95:e2:91:88:62:bb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=37d7c550f71a1eab45a8ad0342f78b0a1df3554a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:6c:76:e4:9b:15:f8:22:28:28:5b:31:41:
a2:a1:f0:c4:a4:df:33:67:de:1e:ea:f0:78:4e:60:
36:35:bb:44:b1:87:ca:cd:e5:ff:13:d2:9e:c7:ea:
b2:86:11:b9:a7:4f:58:d2:27:13:05:af:26:15:db:
b6:7e:f6:fd:e6:a1:6e:fc:44:7a:78:23:ac:0d:de:
40:51:36:32:1c:ab:97:ce:48:8f:e2:b7:2c:0b:4f:
ba:1a:d1:b6:aa:19:0c:12:69:21:3d:21:6f:05:2f:
a3:5c:fe:15:23:d4:51:9a:ea:68:01:a2:f0:fd:46:
39:7d:5b:62:03:8b:7b:d0:a5:3f:cd:e1:3a:d3:b7:
57:69:66:de:2e:0c:58:24:0e:8d:f7:cd:c3:81:90:
19:d1:25:11:ea:6e:56:d0:ef:a4:4d:b0:23:4c:00:
af:ed:61:5e:ed:48:c3:84:94:64:d3:c5:b2:e3:08:
b2:3d:cd:80:0f:3c:80:3f:96:46:e6:fd:64:56:0a:
82:1a:89:02:b6:a3:a1:fd:19:d5:7f:65:fc:a3:b8:
31:9b:73:52:25:ec:d6:60:c9:de:67:e0:0a:c0:2a:
ba:25:72:43:28:35:69:7f:cc:63:3e:f1:0d:43:20:
21:d5:23:e8:e2:67:89:8a:00:7a:25:9c:a4:09:2f:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:C5:50:F7:1A:1E:AB:45:A8:AD:03:42:F7:8B:0A:1D:F3:55:4A
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:c1:d4:e5:8a:49:e7:71:87:46:c7:b2:1a:6c:51:5f:bc:
c7:ab:1f:3f:f1:e1:a5:a0:37:4f:55:06:db:e9:4d:0d:b6:9c:
d0:cc:f6:08:6f:83:c6:25:72:d1:09:31:d8:40:c3:ab:d5:fe:
0f:30:3e:d7:49:73:22:b7:f3:9e:eb:08:45:17:a8:11:e0:08:
5d:c3:1c:c3:ab:78:91:e9:3f:b8:8f:24:04:9c:17:6a:24:88:
ed:40:d2:92:34:fd:d4:27:99:88:17:0e:41:77:58:af:af:62:
4e:4a:d7:c2:a9:dc:32:01:bc:99:3f:4a:c2:90:48:b7:b8:17:
06:14:97:a6:5a:86:bc:7d:4b:e1:3a:c8:b9:15:1e:3f:ed:86:
b8:d5:09:95:71:6c:9b:19:98:9d:16:b0:2e:14:cf:e4:f1:4a:
96:74:32:29:6c:ab:94:8a:11:2c:06:49:d5:fa:92:23:f1:12:
c6:9c:ed:69:d4:37:f9:d4:2a:4e:bf:db:00:d6:aa:f5:b3:83:
12:b5:ba:2e:9f:c9:b9:0c:ad:5d:17:0a:4b:09:dd:14:0c:98:
55:bc:b1:ac:86:2a:11:c1:ba:9f:f3:7b:a4:36:49:49:4d:2b:
d7:6b:cd:38:48:33:aa:b9:54:e2:20:04:2b:88:09:4f:30:50:
5b:70:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:07 2025 by rpki-client