Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: z+VdOQGHp6E8QRdXRK59GJiSaxgsv6BGPJzkvmQkuAk=
Subject key identifier: 63:92:BF:3E:88:44:5D:AC:B3:77:E3:18:F4:D2:81:0E:0F:EC:F2:B7
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 0194BD178BF11D4F6C98DA174044EEDFCB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 0FAA
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: h0g5066DQOd/pOqLUcq4kl7ghF0UVMPjBS+yznirGUM=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:f1:1d:4f:6c:98:da:17:40:44:ee:df:cb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=6392bf3e88445dacb377e318f4d2810e0fecf2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:44:02:18:53:e6:cb:32:b6:db:17:2a:75:
a1:a0:43:92:c7:b8:a3:8b:fb:4c:ee:7e:e3:12:18:
1a:f4:c7:88:90:65:c1:b3:e2:b4:01:11:04:c1:06:
ec:f6:4a:c4:7a:fb:12:36:66:99:56:e1:05:ae:12:
4b:85:a8:f1:38:b8:1f:b5:1b:6f:af:9b:02:cc:b0:
7f:5c:0d:f1:11:22:ac:8d:39:d5:5e:4a:84:a4:4a:
5f:5b:0d:9d:60:4d:de:13:89:f0:c1:9f:eb:63:c3:
d9:ba:73:89:4e:7c:71:f8:55:81:b6:3d:7a:0c:76:
a6:78:ee:b7:47:77:6f:e0:d2:56:44:a3:1b:8d:d2:
da:8c:f7:01:e3:f6:02:e4:6b:57:99:37:e3:39:76:
30:04:96:52:24:16:c4:1e:35:4f:a9:27:b9:59:4a:
3f:6d:93:f7:4c:55:43:36:2b:31:74:06:b2:d6:17:
2f:75:6b:e9:eb:9b:8b:88:57:be:6b:4c:ff:86:36:
97:cb:81:d2:ed:f0:5b:7a:88:87:c4:f3:3c:9b:2c:
b9:43:79:7b:cf:86:9f:29:36:aa:2f:0b:57:86:3d:
6b:ea:f2:22:6e:b0:60:c8:29:99:9c:cb:a4:eb:a8:
66:12:fd:39:91:15:bd:9a:65:c9:f0:c2:ad:c9:90:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:BF:3E:88:44:5D:AC:B3:77:E3:18:F4:D2:81:0E:0F:EC:F2:B7
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:a6:f2:2b:c3:ec:8c:52:be:72:4b:a8:46:b7:37:6e:ae:22:
0b:fc:1c:f5:68:91:88:e4:79:70:26:47:70:cb:66:24:22:87:
57:b5:67:dd:bf:bf:8f:03:88:aa:40:73:d0:1c:31:32:b4:c8:
37:9b:14:4f:34:44:bc:1e:61:3d:b5:48:18:2f:cc:5d:82:b4:
4b:af:c1:89:15:79:c5:32:46:b9:7e:22:ae:38:58:d8:a6:dc:
5e:0a:64:f4:97:83:d4:d8:1f:75:bf:a3:66:8a:ce:66:9d:24:
f9:43:d6:93:91:b5:54:8c:27:bd:c4:fb:e0:d4:31:24:a4:a8:
66:f7:bc:db:a6:a2:a6:9e:19:21:5a:5f:ec:b2:ac:a8:ba:2c:
08:86:54:b5:b3:f2:2c:05:b1:25:04:c9:2c:20:64:83:c4:c7:
f6:a5:2d:15:90:c9:4a:7b:ee:7f:6b:a7:cf:51:be:b8:79:9c:
85:77:84:e2:d3:42:67:8d:23:6d:b3:c3:5d:b0:97:ae:ee:fa:
2d:a0:49:93:38:a2:48:3a:63:3a:1d:31:86:45:7f:ae:9b:12:
23:01:62:c8:8f:e2:fb:85:46:e3:34:4b:ed:52:c0:e3:70:73:
cb:cd:a5:91:c4:9b:c5:97:46:70:86:de:62:e9:68:a7:a8:11:
7b:c8:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:16 2025 by rpki-client