Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier: PrPOtJoKaoTcw5zLTmgmh23ZoV56YJQ4l6lnXNpV4qk=
Subject key identifier: D0:A8:1C:F7:DE:AE:CE:C9:8F:F6:C3:59:28:C5:46:83:7D:E2:FC:F9
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 0194BD4E8F1E051B73437EF271EA03724E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number: 0D5E
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 6k-d4-zz1Bi0ZB30NR9XiBJdbJI.roa (hash: n2UlT2v5ne1WHXzI3nHhngksH2y/h3ykBECiQHVHKNo=)
2: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: BZ+RDpPbIJy2Bz9SkZH77iku+Ku6FucnLVkNhSiEtoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:1e:05:1b:73:43:7e:f2:71:ea:03:72:4e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=d0a81cf7deaecec98ff6c35928c546837de2fcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:73:c4:d5:61:64:0b:60:74:0c:99:b1:4c:99:
18:cc:7f:94:bc:49:cd:e6:78:fc:99:54:ce:3f:1c:
1a:38:ec:f2:ce:a6:c8:cf:14:19:51:c2:32:3d:1f:
0f:a5:00:60:56:b2:68:95:75:fc:92:8e:24:5e:b4:
56:33:10:97:9d:12:28:99:82:83:1c:0e:1f:d2:e2:
3b:ac:93:9b:be:20:2a:63:a2:48:51:bc:f8:8a:ce:
f2:09:04:b7:97:e3:36:df:e8:9e:e8:eb:c8:15:4e:
8c:73:d2:69:5e:1e:f9:ed:fd:3f:ce:5c:62:76:43:
ca:8a:ba:09:d3:4b:bf:05:34:e1:48:d8:81:15:45:
19:24:45:63:e1:4c:67:5c:41:9b:3b:db:6d:5c:85:
cc:36:e3:5b:4f:9a:b6:69:c8:71:35:13:a5:1e:02:
35:4a:44:5e:67:97:54:10:4a:b0:60:62:3c:af:fa:
1d:74:e0:a1:d0:54:9e:50:1a:b8:8c:cf:fe:bf:a3:
e7:de:5d:34:ef:1c:c2:42:e6:3c:d5:47:6d:15:91:
d7:e2:31:61:fd:45:d4:c0:e5:01:4d:88:28:8b:3c:
20:0e:25:a9:79:fa:44:40:ba:f5:36:98:e0:99:4b:
f6:c0:c6:32:ed:68:e3:37:b0:aa:1b:60:0e:cf:51:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:1C:F7:DE:AE:CE:C9:8F:F6:C3:59:28:C5:46:83:7D:E2:FC:F9
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:02:05:1c:21:59:5a:8c:1f:69:3d:58:50:56:90:79:b7:1d:
8d:c1:7a:16:01:99:61:ba:1c:45:3a:bf:95:a2:90:a9:c7:03:
21:1d:49:04:24:21:41:e8:db:50:15:78:58:06:ca:14:5c:a1:
28:34:c8:5b:78:50:01:0f:6e:f2:0a:10:d1:18:b8:47:23:7b:
82:b8:5f:48:03:80:c7:a7:5e:68:37:6f:bc:5b:ec:26:4a:6d:
ad:87:1f:b6:c2:e1:70:2d:eb:ae:a4:13:dd:28:e3:1e:37:88:
33:bd:32:33:48:2e:6d:a0:1e:2b:a4:c9:ba:da:d3:db:b7:eb:
f1:ec:c1:f3:d4:47:36:8c:d1:ec:8d:ab:be:f6:3f:45:ac:52:
ed:16:d6:c2:75:c2:75:3d:24:00:f6:80:29:e7:5a:15:54:dd:
82:1f:49:3e:54:7d:c9:1d:37:e4:7b:d7:f7:fc:33:d3:cd:f9:
80:d5:f4:04:25:b8:75:96:d6:13:fb:c1:31:ce:83:df:65:85:
80:86:07:b3:e8:77:48:3d:b5:60:47:30:57:71:ed:9f:39:6f:
a4:31:65:23:82:f2:db:5d:dc:cd:bc:4b:9e:9c:3a:d9:5b:03:
0b:96:ee:c3:6f:9a:09:f6:af:7c:16:ef:49:8e:ca:5b:42:34:
2f:28:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:17 2025 by rpki-client