Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: QEfthcxOj4U0tc/8Ed1FZX/A2Sfzp9dY7qYy6u6uBns=
Subject key identifier: FD:DE:11:69:8A:00:83:58:C9:31:82:DC:A9:C5:52:6C:F2:3C:82:82
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 0194BCA9C6BF2E0592B41F245E6384DDD6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0AB6
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: o1fr+7Gzg5wenoVNNccEWZOWzGDZ6qfEyue/nDvq7TU=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c6:bf:2e:05:92:b4:1f:24:5e:63:84:dd:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=fdde11698a008358c93182dca9c5526cf23c8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:58:45:65:33:61:c2:02:f3:10:ff:db:84:7e:
a9:f9:a7:a5:d9:2b:44:62:ec:dd:e8:25:13:ca:76:
da:cb:d9:1a:62:57:a8:06:9e:13:bc:8a:95:3a:eb:
39:18:d7:5f:78:3c:0c:af:ef:0e:2d:69:d9:60:29:
7b:8f:6b:4a:9b:17:f2:fc:75:99:f7:27:2b:36:7d:
12:53:d7:f3:f8:d6:bd:d1:56:38:77:34:a6:bd:2d:
98:85:68:95:06:af:e1:8e:91:6d:27:30:cc:b8:79:
f3:a6:a1:49:f6:b9:e4:b7:ff:91:a1:d5:90:eb:c5:
17:8c:5a:4f:2e:f2:84:3a:76:de:e9:c8:14:67:41:
09:ff:d4:47:07:e4:ec:a5:d8:5e:6e:be:8c:68:10:
01:f0:1e:75:87:8f:da:78:da:10:64:31:33:f5:71:
0e:1e:34:38:be:27:33:b8:28:94:f1:f3:b8:ee:67:
5f:44:bc:45:6b:f7:4d:84:30:af:c2:5b:33:ee:ab:
e9:fc:2e:20:60:06:5d:eb:f7:20:21:ce:21:0f:dc:
38:87:25:e4:26:e9:49:8c:20:ea:5b:86:52:f4:68:
6f:e4:b8:1c:fa:d6:21:ef:ff:68:d5:f8:df:45:e6:
36:f1:46:fa:59:db:c9:e7:5d:d2:93:ca:b6:98:59:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:11:69:8A:00:83:58:C9:31:82:DC:A9:C5:52:6C:F2:3C:82:82
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0a:5a:6a:94:75:be:01:20:29:1e:f6:77:49:d4:43:c8:63:
01:f9:ce:dd:2c:72:d8:a5:ed:5f:de:3e:0b:98:cb:3a:00:41:
a3:1b:6a:06:5d:87:c9:3a:09:d5:a6:51:4a:c1:84:17:59:9e:
13:cf:e3:fd:a0:25:1a:ba:9c:90:a1:6e:34:47:26:fa:a6:b3:
c7:75:8d:bf:af:48:50:91:97:f5:54:dc:23:71:70:5c:00:73:
23:f1:62:ac:94:e5:b9:f3:26:94:b1:17:03:d0:86:66:bf:4f:
12:1d:62:f4:17:68:af:06:bb:cf:8b:3d:af:0e:d2:14:68:04:
76:17:0b:9b:18:df:43:78:51:cc:7c:8d:6e:62:b1:d3:3a:de:
b1:0f:a8:10:71:d4:0c:40:21:aa:de:18:97:3c:95:1f:2e:7a:
cb:a2:ed:98:10:2e:81:b9:4e:67:26:c8:ee:9d:07:46:07:a3:
fc:a1:a9:51:12:be:47:97:38:9c:bc:f0:0e:61:13:f3:a2:f1:
0c:33:38:ba:4d:af:5c:51:e9:75:f7:f1:36:09:f7:9a:9f:06:
34:e9:76:91:1f:69:92:3f:8b:64:24:1a:c2:be:4f:4d:93:3f:
9b:5a:d6:d6:47:8f:28:62:67:9d:98:35:d0:9d:02:06:9a:4a:
c7:d5:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:50 2025 by rpki-client