Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: G5Di3pom0sbvH7K1L7RXxA4NejOVoJ19z2ZmcLt2HDU=
Subject key identifier: 9D:AA:01:EE:49:8A:5E:AE:E4:77:9C:4F:82:E7:E9:81:81:90:22:37
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 0194BCA9C268C65EB3F41A0FDAA61A23D364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0AE5
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: BUpjhOyR0eIXbvdzNTMy6B5WXOlvRFVkNramQgQetUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:68:c6:5e:b3:f4:1a:0f:da:a6:1a:23:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=9daa01ee498a5eaee4779c4f82e7e98181902237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:3e:9a:4d:de:30:a0:96:db:48:14:7f:19:
85:d1:70:0b:47:f7:f4:67:0f:30:44:bc:b3:e0:11:
3f:38:22:75:8b:94:ce:08:56:e9:63:f8:41:e4:54:
1b:df:43:a0:b2:21:a6:2e:19:11:c1:7a:7c:d7:08:
a7:e6:56:9f:37:68:8a:1e:49:d9:49:82:13:e2:3e:
54:02:71:94:d6:06:82:9c:d5:ab:35:92:3f:0e:b4:
0c:48:5c:49:a4:29:a1:4a:e9:4c:43:c8:7b:35:bb:
b0:83:43:96:f8:5f:7b:a3:e3:38:bc:7c:fc:ba:46:
46:77:33:b8:9a:64:36:37:78:01:ad:1a:91:a5:6e:
56:88:9c:ca:24:ec:19:e3:0d:b2:47:59:be:f4:9b:
d9:bc:c2:ad:30:37:1c:18:43:11:a1:a0:73:d1:9f:
c6:ae:85:ca:37:0c:65:c2:86:4d:27:5f:98:79:9c:
f6:63:a0:04:4f:48:e0:0c:de:e6:42:f9:5c:88:db:
e0:de:6c:15:3b:c3:79:65:d0:82:32:48:26:d2:b0:
42:96:31:68:14:57:42:85:64:c3:f6:ab:86:f1:52:
fe:b2:2d:d8:41:3b:8e:c7:53:fd:0e:03:38:c5:d3:
23:f6:7c:92:29:29:48:1c:9d:5b:1a:32:dd:31:5c:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:01:EE:49:8A:5E:AE:E4:77:9C:4F:82:E7:E9:81:81:90:22:37
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ec:46:bb:fe:c2:96:b0:79:07:21:44:df:36:ac:b2:59:53:
85:d7:bd:24:87:da:c0:ae:28:05:3b:23:9c:e0:4b:91:24:bf:
4c:ba:b7:b5:78:97:c2:44:37:aa:cf:1f:f0:76:97:8d:08:68:
35:14:02:70:bf:ff:b1:84:9b:d2:77:73:48:ac:bd:31:b1:51:
9d:12:ba:f9:04:93:0e:f1:03:ef:9d:bd:5d:50:f4:2c:b8:6e:
f3:a2:5a:ba:f6:82:5d:81:5a:13:d6:c0:ef:99:81:ff:c8:6c:
10:65:87:e0:84:bb:ca:c5:14:62:a9:7e:df:f5:05:5c:e6:19:
44:c7:89:53:82:f7:4f:3e:86:7c:3f:a1:02:e9:9c:95:c1:36:
13:75:09:77:31:52:94:90:3b:b6:4e:0a:44:03:70:8f:59:5e:
d7:69:8e:88:6a:df:a8:96:c1:43:01:73:92:7a:c4:3c:22:5e:
41:6e:11:1c:2b:1f:ec:97:1d:f4:84:38:6e:79:95:0c:0b:5f:
85:b2:6e:f6:23:33:48:32:80:13:0a:ca:c5:ea:c1:33:51:cb:
22:1c:1d:56:f2:8e:31:3c:49:9f:d3:ee:00:9b:c7:91:f0:e6:
d7:59:ae:df:55:44:0e:cd:5d:c3:45:a5:a9:a5:92:81:c5:10:
93:2e:09:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:04 2025 by rpki-client