Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json)
Hash identifier: WfLrGs+BDCPAXFYNesSuEjOuZBzS6ltPJljbOEGmco0=
Subject key identifier: 0C:BD:90:D0:4C:26:66:40:36:44:ED:FD:1F:1A:D5:F8:38:C4:06:6F
Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Certificate serial: 0194BD8562747C5A0ECE721DDE74372CEBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
Manifest number: 0650
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: 1NTw+mjMN8q9ub66qLhev/yqvOS4FgvwfgGDKAYzLKE=)
2: vWVSSH1CGHkQJxEZjqNStO3HBSQ.roa (hash: N+4dEohs5/FyiDJLAHrNbgO6v8OlO1uW9KupgFkja/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:74:7c:5a:0e:ce:72:1d:de:74:37:2c:eb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=0cbd90d04c2666403644edfd1f1ad5f838c4066f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:be:ad:0e:38:3c:09:4f:90:fc:1f:ff:b8:
36:e3:69:6d:10:eb:d3:6e:a4:c6:70:cb:86:90:83:
0a:e1:64:4c:55:89:96:c2:85:1c:7b:1c:7d:78:0b:
d2:a3:72:b9:90:44:d1:91:59:f3:db:5f:fe:cb:f4:
42:b1:37:61:6d:3b:0f:d7:ab:8b:84:7e:7f:8a:90:
0a:14:c3:40:af:cb:9e:ba:41:a3:e8:4b:28:35:69:
27:6c:65:d5:8b:35:78:75:af:f3:a0:fa:3e:27:bd:
bb:96:8c:f1:a1:b8:b1:78:16:f8:b8:7a:1a:42:f7:
40:05:15:3e:3a:64:2a:26:ae:5a:70:b7:22:e0:49:
3f:78:a9:62:a7:1d:7e:fb:db:2c:b0:a8:30:03:39:
8d:4c:c7:d8:6f:81:a7:a5:a1:d5:1a:3b:64:e7:e5:
8d:f3:3c:2c:0b:a1:86:48:8b:56:06:0a:3b:fe:2b:
af:0c:d0:f9:30:7b:bd:7f:76:13:99:df:37:1e:e0:
d7:2c:be:44:09:08:cf:11:91:d2:69:3b:ec:f8:53:
3d:71:a4:9e:86:08:71:7b:9d:76:bc:80:d3:c9:e9:
af:e6:a6:a8:a4:96:72:24:cd:f6:9d:8e:01:e7:aa:
4f:77:3b:59:cb:5f:3e:4b:04:9d:1a:e7:84:09:a3:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:90:D0:4C:26:66:40:36:44:ED:FD:1F:1A:D5:F8:38:C4:06:6F
X509v3 Authority Key Identifier:
keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:86:97:33:b9:ec:c4:a2:a7:c6:ac:85:92:c2:fb:68:51:
d9:ab:78:36:ed:a2:2e:7b:05:6e:28:85:cc:ec:eb:17:e8:3a:
05:b7:d6:85:27:38:70:9d:63:49:23:f7:12:08:32:ff:68:bc:
50:c7:fe:21:15:af:c5:51:fd:2b:d1:b6:71:7c:9b:ef:5d:e3:
2e:a4:7b:86:a2:f7:41:39:23:9c:9a:d6:73:1e:f3:e3:05:f5:
f3:1e:36:f2:32:91:b3:a4:6d:9c:96:71:73:16:b2:2d:1d:9d:
35:c6:37:72:7c:e7:7d:ac:19:9e:7f:7c:10:76:3a:e7:78:68:
0e:c7:34:63:b5:29:80:9d:9e:8d:9c:2b:3e:de:c5:c0:58:b0:
4e:05:28:65:d5:9b:81:bb:55:3c:d4:68:9d:87:00:d6:7d:89:
53:f6:fc:1a:16:74:6a:f5:ed:13:aa:89:34:e9:e6:c9:42:e3:
0f:7a:ef:1d:16:96:c8:4a:fd:ed:d6:81:61:4e:b8:3d:bc:f8:
6c:e2:e7:56:ff:78:3e:3b:a7:e9:6c:80:d5:99:1a:0b:72:55:
1e:56:10:99:96:b9:f5:e4:2f:58:7b:87:44:0b:bf:ee:ef:cf:
27:0b:52:63:e5:0f:a8:4c:9c:9b:68:cb:3d:2c:a9:6f:4b:e3:
a7:0c:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:56 2025 by rpki-client