Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: FAxkYkvpSXfXPrrR1dmidTolkG5VLpoRXlJDg3dx31A=
Subject key identifier: E2:21:79:47:82:85:4D:33:43:96:79:60:48:2C:48:B2:F9:DC:3F:DA
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 0194BCA9CEFC8D1CEB372C5C22CDAD47254E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 11A3
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: VqnWHlHQcP7+jjtFiZt74oiBKSN6ZVxiAR41+86bpYE=)
2: aeH9HJ9pJaNmWyF-L7DK5SJwZY4.roa (hash: ZymKLot+S0ODnNv/ycCiCzvG9PSmkpOXHHZ4MxN5d9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:fc:8d:1c:eb:37:2c:5c:22:cd:ad:47:25:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=e221794782854d3343967960482c48b2f9dc3fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:94:1f:a4:fb:da:4f:fe:bb:70:f7:18:45:
0a:d6:d1:df:e6:72:32:bc:3e:75:66:6e:a6:39:64:
78:a5:c1:5e:79:b2:1d:cb:1b:66:49:ed:2e:af:a3:
2f:ce:41:5f:1d:50:83:89:d7:11:e8:5b:dc:4b:f6:
16:e4:af:bb:e6:9c:6f:42:98:a6:b2:83:47:0a:59:
35:15:f9:d3:9a:05:a9:bb:47:86:ec:22:b5:1a:5e:
96:1b:6b:62:1e:7f:d9:35:97:65:35:84:bf:13:8a:
69:d2:86:76:4d:9a:5e:75:f9:7b:ed:45:67:0d:59:
09:e5:50:27:02:d6:fd:17:e5:9f:e3:5f:76:4d:06:
4b:b1:42:f2:36:f5:dc:e5:ff:d5:61:18:05:73:ab:
ad:e2:16:66:5c:a5:d8:37:bd:7c:25:d5:86:fb:c7:
81:23:99:08:c4:23:3d:87:ff:fd:ee:20:78:29:d3:
fd:16:18:e3:9b:86:02:67:c6:0b:65:11:75:bc:ea:
c7:c3:21:2d:8f:a6:bb:e5:fd:57:89:6d:a1:90:2f:
8a:6e:49:b8:a6:94:c9:ea:1c:33:f6:8a:9e:da:a0:
ca:73:5f:ed:3d:46:23:83:8f:84:47:2c:61:2f:c1:
51:c2:8a:f5:f9:4f:1a:ed:cf:99:9e:0f:72:aa:b7:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:79:47:82:85:4D:33:43:96:79:60:48:2C:48:B2:F9:DC:3F:DA
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:78:90:5a:28:ec:bf:a9:5f:2a:ab:19:c4:de:51:f2:a2:5e:
fa:58:9b:a3:ad:b3:cb:79:88:38:fb:ba:b4:94:c5:cf:b5:57:
28:3e:0b:62:c5:ea:08:e1:37:7f:18:e6:2a:61:03:f8:b9:51:
65:39:34:bf:1d:ad:6b:d2:29:69:e1:31:bc:e0:63:e5:d5:61:
34:4a:fd:1e:a4:c9:95:9b:08:de:1b:ed:a7:99:eb:50:e7:e9:
b4:74:cb:21:d9:72:94:e8:56:5f:e1:50:eb:76:28:ba:0a:95:
bb:a2:59:a0:7a:54:c8:28:ea:f2:b5:4c:21:59:7b:51:8b:37:
b3:a6:42:d2:1c:fa:28:f8:63:52:58:b1:55:73:bb:18:a4:43:
d7:a0:31:f0:e8:40:80:b4:81:fd:e4:6e:4d:3f:d5:c3:56:91:
04:7d:ce:43:bc:22:d9:72:0a:0f:3a:8b:c6:ae:79:e2:65:00:
26:4d:a0:d6:32:9f:ad:a7:47:27:d8:a9:8c:ca:07:80:7e:3d:
93:f4:ac:24:03:0d:1b:13:07:39:e8:33:26:84:0d:be:93:c6:
ed:6a:c8:8d:a3:2d:91:56:bd:29:07:18:be:ad:8f:9d:7f:8c:
20:26:07:4a:ab:ea:e5:65:bc:2a:cf:2b:c3:76:78:a9:dd:d0:
33:31:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:59 2025 by rpki-client