Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
File: 1OTgFewB2mrn2EkW_RrUyqkE3E4.mft (raw, json)
Hash identifier: ABXGLwH+5ulKpVQS/Mubzr25aYJW/0tuwPixAnXYXWg=
Subject key identifier: F1:93:9D:86:40:6F:27:80:0B:56:66:42:A4:E3:7B:75:2F:F2:48:64
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: 0194BD4E739B7D7099D99BB76AF4AD67A2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 1OTgFewB2mrn2EkW_RrUyqkE3E4.crl (hash: 4S35XQ0jVnmYqRnExJxH7X9HXzgFd5o8kF2PqojxYgs=)
2: Cg7qlLFT5Tw2Rj89YI6LNGMAVC8.roa (hash: RUt6pQHc+8RuyWicYb+I1y3SWfel5InfTPhk0ybD+Y4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:9b:7d:70:99:d9:9b:b7:6a:f4:ad:67:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=f1939d86406f27800b566642a4e37b752ff24864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:ab:62:c5:7b:16:cb:d5:a2:61:e1:53:6a:
c7:8c:94:63:c1:ab:d7:bc:f1:4d:9a:d9:13:44:03:
17:91:a2:65:73:44:a3:7d:fa:44:e9:36:4d:40:cb:
10:10:c6:a8:55:14:ba:b6:f4:2f:99:52:34:0b:f7:
28:db:41:d1:b6:f6:ea:79:fd:83:99:67:65:ca:7f:
09:b4:4d:31:a5:56:43:7b:e4:eb:71:d1:7d:0d:df:
02:7b:05:6f:d7:3c:6c:aa:d1:11:f1:b5:b7:d5:3b:
08:3f:b8:d1:6c:86:af:b2:e4:de:29:6c:a1:7a:e5:
87:30:f9:07:91:b4:f8:b5:5f:4c:31:d2:e9:b8:96:
be:6c:c6:f6:d7:c6:a6:f3:b6:27:22:3d:37:99:8f:
3f:ad:fc:6b:13:f6:aa:08:8d:37:a6:eb:17:ba:4e:
f3:29:1b:91:6b:9e:15:e2:67:aa:f9:50:89:24:26:
60:b6:47:2a:6d:e8:ab:63:58:fd:22:38:77:84:fc:
a4:cd:eb:09:9e:58:08:d4:e8:2d:25:9d:ca:5f:8c:
3e:16:67:12:10:cd:bf:d7:17:d7:70:6a:6a:6e:95:
41:08:50:a3:e8:07:af:0b:5b:c2:3f:90:4a:db:ba:
46:68:6d:5c:0d:4b:b2:9f:ca:49:be:80:45:7b:7e:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:9D:86:40:6F:27:80:0B:56:66:42:A4:E3:7B:75:2F:F2:48:64
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:98:59:63:a5:2b:6e:b0:e3:72:33:a7:78:65:f5:b8:0a:e5:
cc:01:1a:84:35:72:75:8a:5b:bf:3e:2d:41:62:ee:f0:fe:46:
28:d8:fb:df:0c:88:e1:32:48:7c:86:8b:de:ce:d4:40:09:0c:
f9:e0:41:e3:b8:2b:23:26:7e:f7:46:7a:e5:0d:54:06:ff:ad:
fe:4c:5c:6d:20:90:ed:e0:54:5e:d5:72:5c:4f:e1:29:8b:29:
80:e9:87:87:29:61:65:77:f2:08:e3:a0:d0:b9:25:23:e5:95:
29:a0:32:00:a4:cb:39:1f:3a:70:66:9f:48:18:1b:0a:65:73:
7f:5f:8e:4f:77:25:43:4f:f2:a3:30:64:67:1d:61:2c:7e:e1:
d7:d8:4a:80:e2:9f:ac:22:f7:50:b0:ae:82:9e:95:79:fc:0e:
39:86:14:04:97:e7:a9:e6:15:ee:2d:ce:b9:ab:f3:ff:1c:8b:
cb:9b:a8:7e:f0:c5:ea:36:78:f7:c8:d3:6b:7e:5a:49:d5:47:
9a:7e:cc:54:2b:05:45:f1:d2:ab:8d:4a:59:15:3c:e8:b9:03:
a8:61:f9:b1:de:a5:cc:e2:65:80:34:e7:16:6a:7a:41:f7:9f:
1e:e4:39:84:16:49:28:79:22:13:06:5d:38:13:4a:52:8d:aa:
01:24:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:13 2025 by rpki-client