Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
File: xn6d6Ogmze4OZfYiWDQ0uBzze60.mft (raw, json)
Hash identifier: xh/QW09b3H0suYhIaFtnW/3BOgpoG1aHoRnzq8YCdHU=
Subject key identifier: 34:AF:47:11:FF:CE:8F:85:15:FF:44:BE:0C:04:0D:1B:A8:D7:2E:4D
Authority key identifier: C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
Certificate issuer: /CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Certificate serial: 0194BCE07472431103D7ECE8FB90F8E02F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: KBNP_aX1ZMDHHxXviik6zRQbRlU.roa (hash: ernLTnCJ2sF6KL9+yko9XJyEyeHNKyi2S9R/ACM8LHw=)
2: xn6d6Ogmze4OZfYiWDQ0uBzze60.crl (hash: 865IVzPMHrggQzda40BhoOYOd8KJjakdcfH68/azvdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:72:43:11:03:d7:ec:e8:fb:90:f8:e0:2f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e9de8e826cdee0e65f622583434b81cf37bad
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=34af4711ffce8f8515ff44be0c040d1ba8d72e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:40:78:35:0e:25:14:8f:d2:aa:9e:94:19:
99:dc:f5:56:87:84:69:80:8c:a8:3a:a5:75:9c:29:
3b:93:90:cb:5b:ae:17:6f:43:81:de:62:35:0d:1c:
b3:44:60:d1:9f:fc:4a:55:bc:5b:ef:50:a1:1e:58:
6a:d1:d6:7c:d4:8d:ce:a7:60:02:1d:db:b1:ae:bb:
d2:39:a0:c7:5f:27:20:7a:c4:6c:a6:27:28:1a:ea:
f5:0a:17:21:db:d2:69:1e:f9:ee:33:a8:3f:58:69:
bd:70:7c:6b:c5:01:46:49:a4:2d:cd:a2:4c:b5:4c:
dc:81:fa:64:a4:03:b0:f4:49:4a:f5:d1:d1:fb:d0:
08:c7:29:75:2b:0b:04:bd:2d:a6:28:06:06:64:ca:
69:d5:da:2b:2e:85:c8:55:bf:e6:be:33:96:c6:4a:
cd:51:10:b2:55:a6:54:04:1f:eb:21:54:fc:43:41:
a3:b0:bb:16:0f:ef:44:80:fb:01:c7:df:a2:92:6f:
47:9c:fe:1b:e3:5e:c3:b1:33:69:9d:87:76:0a:ac:
4a:4a:5e:7e:ca:2e:8d:7d:a7:32:70:fe:3c:52:84:
9c:bb:2e:2f:c4:53:5f:42:54:d3:06:cb:d9:a5:c4:
ae:d6:ed:25:83:8a:b9:d5:2e:71:d6:dc:82:7f:f7:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:47:11:FF:CE:8F:85:15:FF:44:BE:0C:04:0D:1B:A8:D7:2E:4D
X509v3 Authority Key Identifier:
keyid:C6:7E:9D:E8:E8:26:CD:EE:0E:65:F6:22:58:34:34:B8:1C:F3:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn6d6Ogmze4OZfYiWDQ0uBzze60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0b0c1c-e5ea-4558-bbdd-199e056a6800/1/xn6d6Ogmze4OZfYiWDQ0uBzze60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cf:ba:89:b5:94:21:25:22:80:df:84:79:34:29:c9:b7:8a:
ff:71:76:7e:c6:0b:db:c5:ab:e5:bf:bb:e3:33:c5:7e:0e:2e:
95:c3:a8:24:93:2e:d9:ef:bb:76:75:8a:27:51:4d:f7:b7:1e:
b2:17:cd:5a:a4:f8:fa:7c:32:16:41:4d:c3:bf:8b:00:15:1a:
82:33:65:6e:92:a5:0a:a4:c8:49:7d:59:b6:74:55:12:53:1e:
ed:e1:43:aa:d5:40:51:e5:f8:c3:14:db:59:fa:fb:b2:ee:40:
7f:5e:38:c0:78:85:68:4c:0b:2a:99:55:f7:54:a4:de:d8:b0:
6b:07:1e:b7:06:80:38:b1:b9:46:08:2f:b3:a2:03:d4:fe:57:
51:e8:27:51:b3:cc:33:1c:01:2c:9a:42:98:56:8d:cd:69:f8:
bb:1f:ef:a1:a7:71:63:b3:74:3e:89:ed:f0:02:5c:36:79:64:
45:94:d0:a9:e7:0b:73:3f:d6:3d:75:e9:b8:10:ba:fa:91:96:
0a:9d:20:51:86:db:8e:4b:ea:28:ee:72:db:24:d9:17:5e:10:
29:88:2a:46:87:05:b6:59:cd:e4:c9:f4:0a:5e:4f:a1:3f:9a:
fe:a6:2b:7e:32:c2:76:92:91:c5:eb:59:32:6b:02:a4:e2:48:
3a:6a:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:57 2025 by rpki-client