Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: hNHdPMnBUfAi4EgGlibPHr+earkeDMLko/SU9BKxjLU=
Subject key identifier: 98:96:BA:F4:7E:CD:D6:FC:DD:9E:3C:6A:FD:00:68:E2:C3:F8:CA:6B
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 0194BCE07C4F9A2115E63006AE8500A96219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 0F90
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: nJldvkO6HA3xw5iM300eMCWMOQw+oMjz0J4fEc0uzTE=)
2: e11Y1BzeTv89ORv01AAdP5K30II.roa (hash: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7c:4f:9a:21:15:e6:30:06:ae:85:00:a9:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=9896baf47ecdd6fcdd9e3c6afd0068e2c3f8ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:90:10:5f:84:be:04:48:88:52:e4:70:fa:
34:e6:ac:12:65:40:42:f8:c6:b9:49:af:01:7b:38:
79:57:df:38:17:a1:97:38:2f:48:7d:d8:11:2f:fb:
69:b7:9b:6a:ac:94:f1:9d:e5:32:6a:05:5d:7b:44:
53:3d:4c:3a:53:14:69:f9:8f:f9:5d:34:8b:9f:a0:
60:28:dc:d5:6b:13:4b:2f:2a:d8:36:85:46:63:36:
c9:df:a7:5a:ae:82:6c:8c:01:86:cf:38:98:77:cf:
1c:31:3b:73:0e:80:ca:a7:cf:c8:9f:5d:7a:f3:2d:
42:d7:b7:11:92:f2:55:be:dc:85:99:05:e5:7f:9e:
3d:25:a6:7c:fa:cf:fc:03:ee:6b:56:07:ff:42:af:
46:1e:f9:08:15:57:c7:54:30:57:2b:6e:bd:2a:34:
c4:01:ca:0a:e2:90:ec:50:71:20:eb:58:0e:f1:8f:
28:47:01:08:13:29:02:70:10:1d:42:c8:de:47:04:
eb:16:1c:30:be:73:32:15:0e:69:f3:6c:c6:3d:cb:
9f:27:63:40:82:ef:02:1e:07:e2:ff:2f:15:ec:bc:
4f:69:f0:de:eb:6b:a4:51:25:73:e6:38:a5:6d:38:
07:13:07:a2:fd:99:41:31:bc:55:7d:24:20:4c:78:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:BA:F4:7E:CD:D6:FC:DD:9E:3C:6A:FD:00:68:E2:C3:F8:CA:6B
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d5:05:09:90:7d:4f:8a:38:d5:af:f4:f5:bd:91:bd:f5:ce:
d2:9b:65:2f:7d:48:53:eb:90:eb:03:b1:ac:15:b5:db:e1:3a:
a3:db:2c:65:b4:79:2b:32:e3:a9:79:74:fb:ba:b9:70:d9:74:
48:3a:d2:b1:3e:73:ef:dc:12:29:c6:03:24:33:da:25:c6:12:
4e:0a:8f:b6:0c:cc:c3:65:8f:28:27:05:98:63:a1:bc:ba:8a:
9e:21:77:ab:f4:42:53:c3:89:a7:fe:65:08:a2:ee:c9:bf:8b:
0c:69:4d:29:be:44:dc:69:e7:da:0a:fe:91:6e:05:b3:55:67:
c0:e3:df:44:44:df:d2:56:ed:d1:45:f4:d4:46:0c:9b:40:e8:
94:fd:5e:be:19:fe:fc:5e:15:6e:db:9b:37:ac:d6:91:d8:a8:
8a:a3:36:1d:38:aa:74:7f:e7:6e:38:dd:88:8a:7f:9a:36:4c:
95:0e:af:44:9a:f6:9b:86:06:38:10:a5:a0:b1:15:fa:3a:00:
73:2f:2e:94:01:c2:c1:9b:6e:81:d5:c3:fc:4d:07:ca:71:a5:
83:3f:80:d0:a0:d1:ca:9e:bc:ff:22:f1:75:a8:6e:dd:be:b5:
e3:59:c4:a7:e3:b2:69:5a:02:e2:ae:ba:3d:17:ba:95:f6:3b:
6a:fe:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:03:54 2025 by rpki-client