Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
File: 0tiRsOMo58hWrUt6B2TYLYVgltY.mft (raw, json)
Hash identifier: Ewg1YnX6v3yA8BlOZcf8lJBQ20z1lW1v4V4Yp4JgsqA=
Subject key identifier: 3D:0C:49:01:B0:2F:15:42:DA:EA:DA:17:06:4F:26:86:85:45:ED:3C
Authority key identifier: D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
Certificate issuer: /CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Certificate serial: 0194BC3C4AB4C41A5A6311399DFAC2CC969A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
Manifest number: 7D
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 0tiRsOMo58hWrUt6B2TYLYVgltY.crl (hash: g2QH7/p6bwWdwqHl+G+o+ERJnybK0r+eUyfDDO38zyM=)
2: LL8JcAdqtBuww975zCJ3NT8wbIo.roa (hash: OazqFiciLO+01js5WnVLTxcyLBf+8JShIpJGoJGbyKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:b4:c4:1a:5a:63:11:39:9d:fa:c2:cc:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d891b0e328e7c856ad4b7a0764d82d856096d6
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=3d0c4901b02f1542daeada17064f26868545ed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:35:27:d9:1d:4e:40:de:36:6f:94:0b:c7:
3b:cb:68:f2:db:a5:03:dd:94:30:12:5f:12:e2:0d:
eb:5d:12:82:03:a7:5d:a8:f7:cd:2a:c3:90:0c:7d:
1c:c4:75:f2:26:d2:c7:6d:12:2a:9f:f5:56:3b:6a:
a8:b2:bb:51:26:37:74:e2:99:98:ba:6e:24:59:cd:
f8:c5:f3:f0:51:c9:56:68:91:c7:16:21:0b:8d:09:
a4:b2:4b:b8:f9:38:ff:8a:30:12:e3:d5:83:65:eb:
95:04:c8:8c:cc:fe:a8:74:6b:70:3d:0d:7d:5b:b4:
ca:58:4f:25:b2:9d:e6:8d:f9:dd:e0:39:2e:75:d0:
b9:e6:b5:8a:9e:5c:f6:f3:e2:6c:bd:bf:4c:0b:a8:
54:90:b8:3f:c3:db:65:e0:60:d2:ea:5b:87:64:0e:
ba:d3:a3:f0:6d:4a:ce:17:10:45:cd:f9:48:27:01:
cc:b6:2f:b6:ae:64:47:ec:a6:1c:4b:32:73:5f:4b:
97:ce:3b:3f:ec:7d:99:61:7f:9d:95:94:65:67:fa:
26:8a:1c:be:ce:a7:a1:c9:e5:d1:c7:21:9e:f0:7c:
28:7d:18:27:2c:10:6f:d4:66:ec:bb:0d:c0:64:fc:
72:fe:ab:09:43:40:a4:e7:aa:f3:fb:fb:59:27:27:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:49:01:B0:2F:15:42:DA:EA:DA:17:06:4F:26:86:85:45:ED:3C
X509v3 Authority Key Identifier:
keyid:D2:D8:91:B0:E3:28:E7:C8:56:AD:4B:7A:07:64:D8:2D:85:60:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tiRsOMo58hWrUt6B2TYLYVgltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7fd85d-0152-4ef2-9ebf-1e240b97d2c4/1/0tiRsOMo58hWrUt6B2TYLYVgltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c2:7a:68:5a:be:5e:15:21:56:91:00:50:16:18:fe:d6:b0:
f7:a1:cb:4b:ef:32:35:83:58:c7:a3:a5:f6:5e:a3:01:a6:3d:
ba:4a:84:5a:e6:71:4b:92:a4:ed:e3:41:c7:fa:11:5b:0b:68:
46:3c:a5:dd:c9:f5:92:f8:1f:f4:c5:93:cb:d2:91:04:0f:6a:
91:8d:70:27:df:d7:f5:e0:12:b5:2c:9c:41:84:6f:1a:9f:16:
64:c4:76:37:84:bf:1c:86:ce:3a:f5:de:ed:bd:90:b1:dd:32:
0a:9d:5d:f3:58:c1:80:83:95:79:2a:3b:43:bb:b8:69:1c:06:
7f:03:81:a8:b1:07:34:83:35:34:23:88:ba:d7:4e:5e:62:0e:
ca:ca:4b:d7:88:ac:47:e5:ad:fd:f6:25:23:09:f6:c7:14:64:
dd:d2:4d:c8:60:85:23:a4:91:f4:97:c7:64:17:c6:9b:6c:51:
2d:5d:6f:29:c5:51:de:ce:0d:19:5d:23:08:89:f8:b7:df:a3:
f7:49:37:dc:81:ff:66:a7:da:d5:d4:39:8c:95:b6:7c:02:89:
ce:22:21:4a:ce:62:b4:4b:81:38:64:64:a2:43:d7:e5:93:57:
da:4c:97:48:d8:e0:0b:57:91:59:96:83:22:ca:71:93:73:5c:
cc:36:14:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:59 2025 by rpki-client