Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: y+j4MkpFBBPEQwW1MMtXyK/TyvM4X8b7QK5TbsCc2Xs=
Subject key identifier: 41:45:04:5D:4B:67:6D:D8:C0:D4:CD:8B:95:8D:E9:06:EB:33:46:6B
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 0194BC730403199239A61C8D864E43C1FB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 017B
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: x0JG148kqKT6YNlD94xnwB9O3gSftTfoFua42un6JRI=)
2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:04:03:19:92:39:a6:1c:8d:86:4e:43:c1:fb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=4145045d4b676dd8c0d4cd8b958de906eb33466b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:40:14:75:9b:27:fc:f5:58:a3:db:11:85:
e6:71:01:cd:e8:32:31:14:71:af:91:ca:25:99:10:
ea:41:93:3e:69:fc:44:b8:fe:d8:bd:17:3a:c7:51:
fc:18:e0:82:99:67:4a:ca:1a:c6:95:b6:7e:04:65:
9d:c7:e7:fa:7b:63:22:95:c3:88:af:83:33:a0:55:
d4:f2:34:9f:e3:24:e7:f8:20:a7:5c:67:0c:46:10:
6e:01:b1:6c:2e:f6:4f:c8:ae:f8:35:ca:30:f8:8f:
f8:3a:3f:63:c6:e7:9b:dc:38:85:69:0a:22:3f:f7:
a5:20:a6:07:b1:bb:2b:9f:eb:90:01:1e:07:69:a2:
90:c0:4f:bf:4a:02:fb:61:c8:5e:64:24:dd:90:85:
5a:85:2b:b2:95:6c:e1:87:9d:85:02:18:56:72:9d:
5e:61:dd:e8:a6:54:8e:3b:0b:11:42:98:6d:d6:cb:
81:e5:23:f0:4d:a5:0a:f1:a6:4d:56:c6:f0:58:b6:
17:08:dd:58:0b:29:72:f1:3b:f1:6d:60:e0:d5:00:
68:4d:77:3d:d7:ea:bb:ac:9a:3f:c7:ac:99:58:e5:
5f:8a:a3:b1:4c:38:e2:36:c4:0e:f6:76:3e:47:24:
92:86:47:09:f2:69:9f:ab:46:81:d4:f5:84:9d:e5:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:04:5D:4B:67:6D:D8:C0:D4:CD:8B:95:8D:E9:06:EB:33:46:6B
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:04:bf:5e:92:94:12:ad:87:b6:a2:46:d9:54:c7:14:44:ae:
fa:c5:20:f3:3d:d8:53:c9:4c:f6:78:8e:ef:1d:72:77:74:a9:
4e:43:41:78:dd:c6:24:2a:96:6f:53:61:b9:6b:b0:cd:d9:71:
95:f5:6b:a4:c5:b9:c0:13:0a:f5:19:70:61:5c:54:68:bb:31:
df:ed:fb:09:07:6d:12:34:41:56:7b:6b:c2:aa:4b:bf:26:49:
a0:09:4c:6e:cb:2e:06:12:e6:b5:d9:c8:d1:96:7c:30:9a:79:
69:19:6c:be:ee:2f:db:ba:8b:b1:f6:39:dd:ca:ec:c6:d8:a8:
0e:68:8d:66:67:05:ed:52:13:5e:2a:46:5d:40:34:ee:56:9e:
cf:0b:23:57:29:2f:50:bd:e4:ab:5d:2e:7e:f1:4f:24:37:b1:
03:34:e9:76:18:71:65:a5:d6:3d:05:f4:4e:38:6a:dc:dd:57:
aa:ad:d2:ad:98:ce:44:75:85:a5:c6:8b:a5:3c:66:cc:0a:1f:
57:a0:b0:b6:50:27:d3:b7:96:6d:c1:c5:85:8b:b9:48:91:b6:
ff:9c:d4:09:a9:38:94:0a:f2:5b:65:a5:76:be:d0:c7:c3:88:
5c:bc:b1:be:8c:61:37:cd:83:27:04:0b:99:dd:2b:94:0c:02:
3d:ee:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:48 2025 by rpki-client