Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: VauNa+oOLGlCsG6pOH/msYqcyaVq+WFFrfZMjrdPs+0=
Subject key identifier: 9A:9C:97:29:8A:02:9A:CD:6A:59:56:2A:B8:73:AF:D6:92:DC:DE:14
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 0194BCE0A7683890D54DC71A5B6EDD91F5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 11DE
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: DtH3QKvCMV9LfRl+Eqka3ahjrfr6CnpaKQQTxnZtBYA=)
2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a7:68:38:90:d5:4d:c7:1a:5b:6e:dd:91:f5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=9a9c97298a029acd6a59562ab873afd692dcde14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:74:20:51:f8:d7:4b:1f:e9:53:cc:2f:fb:
53:c7:61:1b:01:20:a5:dc:55:62:8a:0e:3a:57:c2:
36:bf:85:50:cb:d1:b5:2a:2e:e7:90:1e:84:d9:2f:
6b:5d:13:ca:2b:f1:7b:1f:3f:0e:7b:f0:01:3f:9e:
2d:fa:21:96:6d:64:9f:2e:e8:d5:61:20:df:60:36:
25:9c:bf:c0:40:77:3b:c9:33:79:b3:e3:a8:ad:c8:
89:7b:58:d3:e8:d3:d5:1b:b7:65:04:56:83:34:60:
9b:c5:e3:17:9e:e3:0f:bd:2b:66:bd:ff:b4:54:75:
bc:d5:02:2f:a7:6d:8d:0e:b6:fd:8a:c2:cc:9f:f7:
51:cf:2c:f4:de:94:de:75:38:54:e8:78:26:6d:a7:
47:9f:a4:5d:d0:b1:7f:1f:fb:27:0e:c3:8c:75:07:
de:09:4b:20:f8:a8:99:f1:de:25:48:8e:53:c8:d8:
c8:c4:e8:0a:e0:ca:17:d3:5d:81:5c:b2:55:3a:ee:
65:54:cf:4a:8e:c4:0b:aa:f5:c9:5c:93:3a:09:98:
42:41:ea:86:0f:c7:49:64:66:05:6a:68:f0:34:37:
a8:88:3c:e1:a3:bb:b7:c3:b6:93:59:fd:8e:85:15:
d5:28:2f:23:3b:1a:62:d4:b9:c2:9b:71:f1:0b:ec:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:97:29:8A:02:9A:CD:6A:59:56:2A:B8:73:AF:D6:92:DC:DE:14
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:c8:b6:b2:26:c3:c9:63:53:ed:18:c5:db:67:09:54:d6:
27:8a:8d:c2:34:92:13:91:a0:ae:0e:8b:78:a6:13:52:ad:61:
e0:70:34:25:9f:00:4c:59:7c:fe:6c:86:34:24:3e:cf:25:20:
8e:24:85:ba:df:72:1c:cb:e2:2f:70:b9:af:60:dd:fe:f6:b1:
62:b2:80:f2:db:7f:cf:60:44:01:ff:e9:36:13:8d:bc:c1:db:
93:46:e0:50:77:cd:5d:ae:7e:bd:9a:2a:f1:b4:0d:70:2d:b9:
4a:00:46:c8:67:7b:15:a6:70:c6:3f:c3:b0:95:fb:a6:ee:b0:
2c:6f:90:f8:b5:a0:91:12:45:21:78:e6:ff:fb:ab:4b:63:63:
59:15:b9:31:aa:90:8c:53:59:25:1a:4b:4d:4a:47:2c:40:17:
c5:2c:e0:b6:ca:52:b0:af:12:21:b2:31:58:66:3d:51:6c:84:
e6:13:d7:2e:e3:5a:4c:a6:18:c9:aa:5a:d8:17:02:84:3f:0a:
c2:cf:cd:23:4a:7d:92:8c:8e:0f:61:3f:57:85:a2:0d:75:cf:
5e:6a:27:10:ea:72:03:0b:34:94:c7:f4:ff:30:b8:95:e9:ba:
76:62:62:8d:7b:af:77:e7:60:dd:ab:a0:a0:4a:67:3f:1f:aa:
7e:34:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:07 2025 by rpki-client