Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: 9vtUOC5CxGC9LbyQTJvgl9Bw7ItFQOwXOJEbR5Zm1QA=
Subject key identifier: B9:81:54:0B:B8:A5:FA:96:5D:3B:04:DA:15:3F:7A:67:9D:3C:76:97
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 0194BC050451A819B5ED225AB26C5B2CBD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: LlY48B1PgnvzmDQs9wRpslXINQuE+N8KfFfcFlacea8=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:04:51:a8:19:b5:ed:22:5a:b2:6c:5b:2c:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=b981540bb8a5fa965d3b04da153f7a679d3c7697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:d5:46:f5:68:e9:22:6c:c8:12:5b:a8:b3:
22:79:95:13:85:7e:94:eb:20:55:61:03:84:8b:8b:
b6:05:05:2c:f2:30:96:f3:41:5b:c5:35:b2:58:d6:
92:c0:72:7f:ff:00:13:50:f8:c7:7f:a8:86:6a:3c:
42:c1:0d:e5:6e:2e:14:34:4b:af:fc:fe:19:3a:f3:
42:3b:b1:a7:f4:ea:87:94:a7:73:6a:c6:52:fe:1e:
31:c0:b9:9c:47:b9:8a:24:9a:78:c4:12:1a:7e:1d:
10:85:81:18:3b:25:ba:b1:aa:a8:01:c2:f4:d7:22:
0e:41:25:d3:7a:a5:4d:a5:c3:e4:c7:29:c1:00:96:
23:72:a8:13:a4:e3:c8:b7:52:52:a1:85:26:d5:6a:
42:28:20:d1:5a:c5:bb:8a:1e:b6:9e:4c:fb:46:76:
c3:c8:23:5a:e4:ce:b2:39:bb:52:6e:1c:80:88:bf:
01:10:d3:be:88:83:ba:7e:2f:ad:55:17:8b:35:5f:
a6:42:66:34:97:e2:7c:c3:ad:80:a4:7e:79:11:39:
fa:ec:4b:e8:0d:67:3c:e6:1f:40:bd:e7:3b:a9:71:
9b:48:ad:a7:3a:22:32:8b:fd:87:ff:3f:99:db:ab:
cd:37:f8:bd:2e:63:1e:2a:18:7b:7e:62:6b:6f:8b:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:54:0B:B8:A5:FA:96:5D:3B:04:DA:15:3F:7A:67:9D:3C:76:97
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:be:ab:32:05:86:f1:73:3a:8f:fe:57:e5:da:64:26:18:58:
00:9a:bd:7d:cd:d5:b9:87:82:4a:a3:57:80:7c:ec:76:61:57:
a2:c5:8c:25:09:88:eb:86:e8:29:22:e5:e0:26:c2:41:6a:3b:
07:9d:19:4d:75:43:9e:10:01:be:84:c8:e9:20:7c:e9:47:c0:
b5:81:83:06:ca:e3:71:c6:15:bd:48:8c:6f:83:42:19:b0:39:
bf:1b:c4:e5:3e:ea:b4:38:d3:27:18:f5:53:76:2c:41:0a:a0:
3b:5a:63:58:a2:27:3f:65:fb:b8:85:c0:42:e0:60:07:e4:a0:
45:6d:90:6b:4a:6e:e4:cc:79:20:9f:d8:ab:62:5c:7f:c1:e5:
14:f1:33:88:b7:ec:85:a8:c5:72:82:5b:a5:e1:82:a5:40:aa:
6d:bb:69:80:74:fa:13:88:47:43:56:23:4c:29:79:6e:cf:bc:
86:0e:e9:b1:75:83:4e:98:cc:81:49:fd:3e:a8:14:c8:99:3f:
d2:66:78:a3:73:30:41:9c:25:fe:64:5e:c6:4a:e5:19:b0:17:
68:86:9c:52:d4:a7:de:e3:76:f2:a6:6b:da:4e:d9:0a:89:58:
b4:72:23:c3:57:f4:23:53:c1:38:de:71:61:df:78:3d:2e:a4:
f3:cd:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:40 2025 by rpki-client