Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: Zj5xj5N6QYIZkdp2kHGSbwzMlR+4FE7imakSoHcdSfU=
Subject key identifier: D8:AC:6D:1D:FB:9C:5C:36:C4:9E:7C:50:C6:24:46:21:DE:EC:79:F6
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 0194BC3BD375B21F2EA7485B52BB1826B72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 0EB2
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: iIZlpIyXor8TqA7y8DypWJsMlF1xRIe/8gfz5nrEOrg=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d3:75:b2:1f:2e:a7:48:5b:52:bb:18:26:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=d8ac6d1dfb9c5c36c49e7c50c6244621deec79f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:d6:42:b7:10:2f:ff:88:65:33:a4:4f:26:
00:f9:fb:62:54:40:ab:5f:13:a0:78:99:f6:c8:71:
50:12:c9:01:9a:19:ae:79:cf:cb:6e:62:a8:75:58:
52:56:d7:70:17:6d:4e:db:56:86:33:00:f9:49:66:
61:99:ce:7b:56:ed:03:5c:7d:52:7c:4a:9d:b9:bd:
db:06:81:41:73:a7:0a:3c:9d:48:ce:e7:32:02:b7:
4e:17:77:4b:04:7d:0c:d8:fb:00:94:2d:4c:72:b7:
b4:ff:3e:9e:8f:95:04:86:60:a1:b5:d8:53:2f:9e:
1e:4b:2b:9e:c9:a2:54:89:45:24:af:05:25:69:4e:
10:73:27:9f:f5:93:cc:ac:47:57:fa:16:2b:54:90:
10:fb:df:0f:00:1d:95:17:88:9f:ea:98:a5:97:6a:
d4:ee:10:a3:78:52:79:ac:d1:56:53:48:f3:9e:28:
7c:71:ce:aa:df:46:43:0c:cd:46:e4:d4:41:d9:56:
ea:9d:d9:de:64:86:01:29:e0:07:3f:84:d5:d5:7e:
26:fb:28:94:5f:c0:9b:69:33:8a:4e:46:31:6b:e8:
c1:58:4e:61:f6:62:f6:b6:df:3b:65:dc:96:df:90:
47:d6:55:cd:67:f0:0b:68:77:16:fe:9a:ee:b4:ff:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:6D:1D:FB:9C:5C:36:C4:9E:7C:50:C6:24:46:21:DE:EC:79:F6
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:a1:f7:74:6a:ba:13:6a:32:57:96:13:bb:40:16:f3:7f:
b8:e5:29:d6:a4:df:53:23:00:c7:1b:1a:8d:22:26:f8:75:3e:
e2:03:29:63:36:cc:12:19:40:12:c6:2f:ae:f8:94:fc:89:ed:
da:03:85:4e:98:bc:d9:34:2e:0a:85:d9:25:13:1e:50:c0:a7:
7e:a9:19:d8:3d:b5:dc:fb:b8:8b:b6:a0:eb:b1:ff:41:35:80:
fe:bd:a0:ec:f5:36:1c:89:c9:59:54:63:82:5e:f9:96:2e:36:
8b:2a:24:ef:68:8f:e3:40:d0:57:a9:20:fc:e9:9d:62:c1:00:
94:ef:48:91:b7:af:dd:f1:11:7b:f2:01:03:7c:ec:08:56:1d:
cc:a4:7a:77:da:53:5a:1b:5f:76:c8:3d:df:ba:99:ef:22:c7:
e1:da:0f:ba:c2:75:07:c3:80:ef:46:b1:70:76:f4:5d:0c:d0:
65:05:c3:5e:9e:01:5f:1b:2c:f0:7a:d7:53:49:ca:fa:ea:cb:
40:b1:a5:22:b0:0e:c5:5c:19:de:7d:30:c5:24:52:ff:ac:18:
25:31:69:87:2b:e0:38:5e:01:69:ae:06:29:bd:43:b7:84:b2:
1a:6c:31:45:98:d9:9a:ca:78:6d:6f:b9:74:8c:90:75:66:65:
93:05:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:11 2025 by rpki-client