Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
File: ao33d2sW0oLgTGluJYqk-fnOnJg.mft (raw, json)
Hash identifier: SL9WA5OEpfOyUhsHMxmp0e0QdogyggeWpu8f/0xZf5A=
Subject key identifier: BB:95:DE:FF:BF:D8:25:08:C2:1D:66:6E:55:02:02:C4:BA:F3:D2:95
Authority key identifier: 6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
Certificate issuer: /CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Certificate serial: 0194BCE07363C3E4B82C4AD7CE88BC1DB80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
Manifest number: 081B
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: ao33d2sW0oLgTGluJYqk-fnOnJg.crl (hash: KcBgV7lNhycXFUx/uxWKPJmbiJpNmKYODazlpH8n6/U=)
2: zkFI0q7jFUcpvcC1_CEihR1YV24.roa (hash: 783T5wgYEpPQMcRoCX4E0P3B8Y6FUugL0p43iJWmXrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:63:c3:e4:b8:2c:4a:d7:ce:88:bc:1d:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8df7776b16d282e04c696e258aa4f9f9ce9c98
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=bb95deffbfd82508c21d666e550202c4baf3d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:a2:e2:ce:03:c4:f6:54:df:da:ad:fd:33:
53:34:5d:29:11:45:b4:fc:76:04:fe:24:92:41:3d:
1f:ab:cb:be:9e:4e:a8:f6:35:24:83:ac:15:df:f8:
79:c5:22:56:be:2d:df:58:bb:fb:03:c2:e0:d7:1c:
07:83:7f:b6:73:ae:32:22:d0:55:23:97:02:5c:6e:
c6:fd:d8:52:5e:fb:2a:61:d7:fd:44:f8:58:3c:00:
01:fe:ff:d0:05:2f:cd:58:6e:71:24:09:d0:9a:58:
b1:f7:fe:c3:84:7a:12:70:99:a3:bb:1f:89:7a:da:
44:aa:0c:e0:92:24:b5:b9:37:60:f9:c5:09:07:4c:
81:74:51:2a:04:22:9b:41:6f:b0:d5:a2:ba:40:f1:
5c:36:a3:d7:b0:51:38:42:ec:74:da:9b:c2:2c:ae:
20:9c:07:bb:41:25:3f:0f:7e:ef:c8:1f:09:8f:59:
5f:d2:09:a9:cf:24:a9:70:37:8c:22:e9:20:1a:0f:
d0:b8:b0:5d:89:43:04:5f:52:64:ba:59:ee:8d:2b:
4d:09:30:e7:f2:40:fd:46:53:fb:85:4b:fe:1c:39:
b1:59:4c:03:be:b6:8a:4d:30:ed:1f:87:01:20:40:
7f:10:90:6f:9e:f9:85:31:de:15:1c:64:83:24:25:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:DE:FF:BF:D8:25:08:C2:1D:66:6E:55:02:02:C4:BA:F3:D2:95
X509v3 Authority Key Identifier:
keyid:6A:8D:F7:77:6B:16:D2:82:E0:4C:69:6E:25:8A:A4:F9:F9:CE:9C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao33d2sW0oLgTGluJYqk-fnOnJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d301cd-f513-4995-9d55-1b38b02245c1/1/ao33d2sW0oLgTGluJYqk-fnOnJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:4f:f2:32:58:c1:e0:32:ce:88:e1:b2:9c:96:87:b5:c4:
a4:07:91:42:c6:47:2d:83:ea:a3:50:b2:a9:30:30:98:61:a5:
3c:d1:4b:8d:99:4e:b3:42:bd:92:5c:48:45:9d:31:05:e5:84:
e8:36:65:7b:b6:9a:70:c6:d5:fd:69:dd:10:f8:da:a0:42:ee:
79:45:5b:a2:5a:24:7c:46:28:88:1d:4e:fe:51:58:63:a8:a2:
b1:10:fd:a4:56:0c:d9:d4:13:1a:b7:88:83:07:83:02:d4:b0:
7a:78:0c:26:75:41:1c:05:f9:c0:98:16:4e:ab:3c:37:39:15:
e6:44:54:ca:32:33:8a:5d:be:71:f0:93:a7:70:f9:ae:87:b4:
e1:5f:cb:df:ae:c4:15:eb:3c:ab:43:e9:e7:b3:4b:61:b5:0e:
24:35:a8:b8:cf:a8:d8:e8:ca:2b:a9:a4:a1:d2:2a:f2:4d:75:
a0:2b:0a:95:4c:a9:85:5b:94:98:62:37:a5:34:b7:22:09:79:
ce:92:86:4e:7d:b0:57:4f:1f:04:8f:b2:9e:84:24:20:6f:af:
a1:0d:ac:a8:25:fa:f0:5e:45:5a:6a:a6:fb:25:d0:56:7d:48:
63:1c:7a:23:ff:b9:ec:ca:f8:76:87:3a:8c:81:3d:a1:ac:54:
19:86:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:08 2025 by rpki-client