Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File: 02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier: dyNxs9SBnSrUvRkw+3HpkQfVL0SFjhZOgr2tv5ntcS4=
Subject key identifier: C2:05:7C:79:70:7C:C0:72:65:9E:7B:6B:42:8E:B0:55:17:B0:91:39
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer: /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial: 0194BBCEEE6DCE1B280A75943F0849D3E257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number: 137B
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: RaWUbqY5kMjXe+/FJ6Etp5mffH+atJMuxfoDds+/d68=)
2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:6d:ce:1b:28:0a:75:94:3f:08:49:d3:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=c2057c79707cc072659e7b6b428eb05517b09139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:9f:e9:51:b9:8f:ae:98:c3:4f:d9:fa:77:
e6:9d:fb:9e:9f:45:36:40:72:f6:51:d4:e9:9c:02:
45:b0:db:f2:d0:c7:e7:d9:fc:e7:ee:43:6a:f7:aa:
1a:62:1c:4c:56:78:be:b1:67:c9:bb:9c:5b:12:55:
ae:7a:f4:93:bb:66:a5:2f:c0:7a:2e:13:bc:47:5a:
25:6d:9e:c2:e8:ac:96:4f:e8:ff:ee:80:01:3f:b8:
de:db:4b:27:f9:9b:1d:91:32:d8:f0:80:fc:f2:dc:
0f:1e:2d:e7:d9:2f:a2:53:a9:14:8c:57:87:19:48:
75:ac:d3:f0:4b:21:ed:8c:0f:d6:47:36:b0:4f:28:
e4:0e:0f:8a:ba:eb:df:61:3d:ac:1c:66:ed:45:a0:
c8:89:55:01:a3:dc:63:a4:28:a8:06:7d:14:8e:51:
0d:f6:7c:b8:1d:8d:da:14:db:4c:30:33:be:4a:dc:
2a:08:64:8d:0d:e8:2d:aa:3d:db:89:7a:62:d7:b5:
39:31:55:c5:c1:ed:6d:29:fb:1c:15:fd:9c:c4:36:
26:70:9e:9e:fe:65:82:6b:63:39:88:a3:59:ab:98:
f6:f2:4f:2a:70:6d:7f:a2:d5:c8:eb:5d:19:98:df:
ed:60:9f:7b:44:3b:16:45:87:1c:bc:97:bb:60:72:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:7C:79:70:7C:C0:72:65:9E:7B:6B:42:8E:B0:55:17:B0:91:39
X509v3 Authority Key Identifier:
keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:10:d5:69:18:56:25:56:b0:0f:a7:e9:52:c9:8e:b1:f5:3d:
95:6a:67:fc:dc:a1:5b:0e:4b:c6:84:67:2c:67:04:e1:4e:46:
df:39:b1:ab:7e:2a:c1:3c:e6:16:2d:1c:08:9c:1e:bf:82:a1:
93:bf:d0:15:0b:38:84:df:22:d7:a9:c1:46:3e:43:57:56:b7:
fa:bd:7d:ec:46:cf:9d:7e:31:2c:17:fc:ed:71:da:83:1a:27:
41:c8:79:0d:93:8a:86:95:2b:bf:56:db:03:cc:4f:e8:8f:e9:
d7:b6:79:7d:32:89:95:1f:73:bc:93:02:51:90:18:8a:e8:cb:
a1:7d:9c:36:3e:99:c9:4f:7a:4e:69:c7:bf:36:27:56:61:18:
24:04:0b:24:32:54:d8:af:2f:e0:2e:94:c4:f5:58:37:f8:29:
be:4f:2f:59:19:f9:84:5a:b9:f4:85:23:37:30:77:eb:7f:c3:
da:5c:bf:1e:13:d3:0e:c8:08:91:7f:6e:ad:35:ba:b1:32:76:
1a:b4:bf:2b:ac:97:1d:24:fa:8f:7f:fc:c8:a0:54:2d:ca:14:
cd:cc:de:f3:68:b5:b8:c0:61:d4:f1:15:35:f6:28:8d:fa:6a:
06:69:e1:f0:b4:1d:e6:1b:fb:c9:04:a3:68:35:a8:b8:c0:f5:
e2:0b:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:30 2025 by rpki-client