Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier: NoWaFYc8G+7AN5WBGOUn5ARKIDcpfBL0GGYoQ/uu1lA=
Subject key identifier: DC:19:4F:24:B9:5B:1B:1A:A7:20:95:FB:BA:B2:12:08:35:1A:D2:C4
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 0194BCE06DF03CC1A3F3E8C90A1E75FE4A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number: 0813
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 2z5OP5uOUPeCHEZvOlemyfzgiqA.roa (hash: Hk782ryuX9Xc6GFCRAe62b1gzyY4Vb/jeKK1cnQhmr8=)
2: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: i6c+W3fYnRP8hy69Rvw/pY3MmwgaFFvDkwkA+5IiXDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:f0:3c:c1:a3:f3:e8:c9:0a:1e:75:fe:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=dc194f24b95b1b1aa72095fbbab21208351ad2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4b:ae:0c:88:5d:0c:d8:b2:d8:68:0e:d5:41:
9a:7c:5b:67:26:ce:5c:fb:31:7f:45:dc:b2:7a:e6:
9b:c6:28:0e:90:c1:41:07:3f:bd:43:05:80:e2:1b:
ab:12:43:e9:d7:9d:ba:ba:88:dd:b1:21:e7:d6:50:
2a:87:23:b1:5d:69:28:51:78:2f:f7:5b:98:67:55:
b8:fd:f9:cd:92:86:a7:33:2a:ff:0b:71:3c:0c:3e:
5c:50:a7:80:27:a4:1a:e1:2b:ac:71:e2:c0:1b:2c:
05:c5:e4:b5:fe:a6:d8:c0:eb:b7:8f:3c:21:e4:c6:
4f:ee:27:a3:41:79:c2:0d:bb:61:0f:5f:11:ae:a2:
94:c4:bd:37:ce:3b:4a:4a:97:96:f8:d3:e3:12:4f:
17:00:21:84:0e:64:85:cc:55:ef:4a:c6:48:f6:14:
8f:c6:6f:d3:11:e3:32:1d:69:dc:0a:98:e0:82:d2:
e7:ea:7d:a5:3f:f6:85:52:62:69:61:56:1c:2c:33:
b2:98:bd:99:f2:c7:c3:fe:bf:c0:ee:44:41:4b:95:
ee:03:a9:a7:bf:6b:32:45:c7:98:b0:21:e4:88:83:
59:98:00:ce:cd:8d:23:d3:c1:73:7a:f3:ee:15:77:
b3:95:ea:84:3e:c7:c2:e2:dc:56:30:0e:8a:7c:fb:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:19:4F:24:B9:5B:1B:1A:A7:20:95:FB:BA:B2:12:08:35:1A:D2:C4
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e8:95:6b:c6:d4:6c:90:c4:ad:c0:c1:19:a7:31:f6:47:7a:
24:56:5d:4f:d9:55:6d:30:ab:ea:09:0e:67:5a:b7:ed:ca:be:
12:8f:ff:34:16:7f:f4:2e:a3:26:38:b6:4f:98:15:21:e3:be:
e2:99:86:ea:2b:48:08:d5:1b:34:b7:f7:c6:c6:27:5a:cf:6f:
4a:ca:00:1c:7e:f5:c7:fb:57:09:71:6b:81:0f:ae:5c:53:73:
a3:92:35:7d:8c:e5:2c:3b:90:5b:94:03:b8:16:69:6b:5f:e9:
ae:35:58:6e:56:43:44:f9:74:31:f6:02:c7:b1:84:f2:70:2f:
4a:5d:7f:81:79:8b:a6:f9:e1:ff:32:ac:4c:53:f3:59:6b:c3:
14:17:86:80:0d:3f:c1:a5:bd:8d:5d:54:e3:fe:25:ee:a4:26:
2f:a6:0a:a1:e5:04:26:12:47:d9:cc:44:b2:42:ae:55:ca:d9:
04:1a:dc:c6:a1:83:a6:4e:bd:84:f7:ff:ec:31:e4:09:30:bf:
91:b7:94:94:13:fd:5f:82:f5:c3:d7:d3:2f:5c:1f:72:81:01:
cb:f6:53:c3:49:4d:8a:ab:76:94:5b:36:1e:ee:be:fd:b2:ef:
90:f3:60:28:30:4f:63:92:2d:70:72:de:8a:9f:ad:ab:a8:a8:
3c:9d:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:01 2025 by rpki-client