Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
File: CoTkc6pWTrUafn64sY8UrAy8LJw.mft (raw, json)
Hash identifier: YhEHBlVpbV+WT+uBmiRQfyBPX7/qbwSVc0n1vVctLtM=
Subject key identifier: 14:CA:84:F9:2E:FD:B5:99:4D:9E:75:B5:71:ED:AC:D5:C0:65:04:34
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 0194BC7324C4DE687D41648F2D112BF3E2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
Manifest number: 1155
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: BepPUqJmcox6vrPVeFLnic_YFR0.roa (hash: C5IbNUmrfVvGpmpP7H7NCibsdAPbj5KKxAELI101al0=)
2: CoTkc6pWTrUafn64sY8UrAy8LJw.crl (hash: nyzfe6HJPaPyuvdCL+n5LFSTnsRFXcmHt/ziLEzNhq8=)
3: yKqwm37t4yVmxr4NwzTqfwD-IDY.roa (hash: MxaSTIqKL5tTZsGpRXKzjl3dEdK1M2+iZYuBArbrbWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:24:c4:de:68:7d:41:64:8f:2d:11:2b:f3:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=14ca84f92efdb5994d9e75b571edacd5c0650434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:79:96:2f:48:89:e2:b7:0f:a1:e5:cf:61:
4b:cb:a7:15:1a:ef:e3:50:2e:f8:e0:df:d1:78:b2:
5c:07:54:ae:e3:54:fa:d6:d6:53:65:00:f7:9c:88:
82:e3:05:88:4c:c2:77:98:d5:d9:98:14:a9:25:62:
b3:22:e1:2f:69:19:ba:ec:67:d2:51:e9:ea:4e:63:
59:39:51:6d:33:08:d0:35:a7:6f:78:f5:a4:c5:e3:
39:e4:dd:6e:ce:0c:7d:4b:c7:e5:87:10:43:f1:5d:
4b:ff:e6:cb:c7:3d:4c:6c:90:a7:bb:25:dc:86:98:
a6:fc:ce:b3:11:ff:61:3e:84:ad:26:95:f3:41:61:
73:aa:9b:44:da:92:f7:ba:2b:f4:f1:9d:50:3c:66:
3b:48:52:37:b1:78:95:04:25:06:85:e7:c6:a6:cf:
31:5b:58:d1:0c:b6:37:f3:7e:a0:cf:00:f7:4c:ed:
da:cd:ae:53:f3:f9:16:4f:de:e7:d4:23:8d:b7:61:
55:56:8a:96:d0:9c:70:17:6a:6a:eb:01:8a:ac:68:
74:f6:fa:c7:46:11:28:89:10:c0:16:5f:4f:f9:81:
8f:94:7d:d1:e4:3c:d6:b7:aa:39:8f:f5:5c:9c:a1:
0d:8d:d4:2f:14:aa:2e:e9:6d:a7:2c:0d:c8:8d:fc:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CA:84:F9:2E:FD:B5:99:4D:9E:75:B5:71:ED:AC:D5:C0:65:04:34
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4d:81:ef:74:c2:20:2d:1d:fe:73:8b:2e:b5:fc:c8:17:a7:
67:f5:e6:65:0f:aa:5c:18:ef:64:54:0e:a9:96:e2:ab:0b:91:
1b:7f:cf:d2:0a:16:2b:e3:04:aa:d8:8f:32:f3:4e:c4:cd:15:
40:25:86:c6:4c:4e:ac:c3:9f:df:e0:d9:92:bb:6e:7f:aa:75:
65:00:75:f6:d5:f5:99:92:d6:e6:cc:1e:c2:26:ef:03:c1:9b:
0e:aa:b4:e9:c1:70:8a:58:3e:aa:6b:d2:89:3d:8f:b1:08:d6:
e9:c2:d6:1e:47:3c:c3:7e:07:df:74:d0:b1:40:2f:67:e0:62:
ed:c3:3c:a6:87:5c:2f:ff:47:db:ca:4c:ca:21:91:c3:ac:14:
e8:d0:66:9f:37:c6:9a:6b:6d:3b:cf:12:1f:c1:4a:1b:e3:9e:
cf:06:13:96:36:8b:c0:ad:7f:0f:42:13:98:7c:d9:53:72:c5:
98:b3:3e:6e:f1:27:47:cf:b5:b9:6e:1c:ec:fa:cd:64:e1:cb:
87:1a:03:1d:66:b0:17:07:cd:f4:be:cc:1c:5e:f1:05:35:94:
de:27:97:3e:3b:54:db:87:e2:37:ab:f7:d0:05:7e:74:be:cf:
aa:cb:27:29:cc:47:ab:49:2d:50:db:31:d5:11:7e:7f:aa:eb:
bb:9b:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:24 2025 by rpki-client