Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: DEokltVyZ16FKbafQiuLnIwjTT967nIjriSTHFcl1b4=
Subject key identifier: 24:4F:37:5D:EA:E8:AA:0C:0A:82:FC:97:49:F2:2D:8F:4C:AD:CD:12
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 0194BD17956302F781A308266AC635A3E137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0723
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: lazGW2yceW1Tv6W/Xfn8kLlqS30lzsizTZl0ahqyQYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:63:02:f7:81:a3:08:26:6a:c6:35:a3:e1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=244f375deae8aa0c0a82fc9749f22d8f4cadcd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5c:b0:b4:8c:bb:65:32:76:7c:32:fb:27:e3:
51:ff:44:84:43:3f:38:3f:3c:fb:df:ea:3a:ac:fa:
b8:92:85:b2:a7:2e:53:29:2d:c2:76:21:d6:b0:9d:
5f:04:42:55:c3:f6:55:13:56:47:02:a4:92:13:8a:
f4:4e:e3:8d:c1:98:25:36:8c:4a:23:04:a5:48:ed:
7e:02:0b:f6:92:c0:42:29:d3:43:78:25:4c:57:01:
83:c4:ad:cd:84:83:34:fe:5f:3c:0c:b6:90:cf:02:
66:79:33:34:c6:ad:17:98:3d:92:7d:2b:c6:c5:17:
29:fe:48:58:de:af:27:18:b4:8c:10:d2:7f:4a:fd:
02:11:12:ad:6d:f9:d5:1a:43:c2:ce:b5:cb:1a:ee:
ad:cd:67:7f:5f:5b:a2:91:93:ff:d8:73:05:4e:d6:
73:92:ee:08:8f:cb:8f:8a:8f:56:7a:39:31:ef:04:
09:23:85:8d:89:bf:76:1d:83:d8:5f:d6:d6:20:81:
b1:58:40:9a:e8:fd:c8:dd:c8:73:88:18:7a:2a:dd:
56:4f:17:d9:44:34:59:d1:66:24:91:83:08:ef:c3:
22:f7:c7:ac:58:d2:b4:79:5b:b1:37:44:9f:8a:a8:
28:64:e1:24:20:d8:dc:7a:f4:b2:b2:91:2d:7b:12:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:37:5D:EA:E8:AA:0C:0A:82:FC:97:49:F2:2D:8F:4C:AD:CD:12
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:52:70:9f:02:e3:3b:b2:c3:75:84:09:e7:fb:37:a2:67:
8a:d7:91:48:fe:b6:ae:e9:d5:8e:a2:39:33:b4:10:e3:8a:59:
b6:fa:79:fa:a6:1a:f1:5e:46:0c:4a:50:13:cf:13:ea:8d:24:
c9:b4:36:5b:de:22:e5:3d:29:10:e8:4d:05:5d:48:14:8d:98:
64:15:b9:b4:d2:6d:bf:44:71:71:d6:81:78:42:a8:fd:60:25:
e2:74:ad:64:44:8c:f3:c0:8d:3d:d1:6b:71:52:9d:63:c5:da:
ea:1b:6a:ff:3d:6b:1a:9a:6d:58:4e:c4:0a:48:cc:2e:e1:58:
43:34:21:e6:ea:eb:5f:2e:bd:9e:05:08:40:74:b9:f4:28:49:
c9:5d:e9:eb:86:b8:6d:e6:8c:60:4a:7d:2a:c0:89:3a:8b:e5:
63:3d:b3:a7:a6:d3:7d:5a:70:97:f8:45:99:f8:10:93:b2:3d:
d1:56:ee:a5:51:64:ba:50:15:50:4e:5a:4e:a3:83:d8:10:e2:
4d:15:32:fc:e3:c9:90:38:cf:52:e9:e2:5b:af:d3:b8:32:9c:
cc:dd:37:7c:69:1a:23:53:03:d9:26:df:15:4d:8d:a1:3f:83:
d1:1b:c9:a4:ea:fb:f7:dc:5a:f2:3a:fc:cb:ed:b7:98:06:65:
64:cb:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:48 2025 by rpki-client