Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: kOIkwNCM7UTNQpkDt93EJ9XSCCsvN9ARQH6l+msKWjM=
Subject key identifier: 0A:99:31:6A:14:85:07:45:17:B9:79:BC:23:16:B6:D5:16:11:6A:99
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 0194BD4E7DE50F5133C11B1D3514231952DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: +6hoAlpwpRC+YpOtbKrLOBD20P7+1lqqShZbv8Flw/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:e5:0f:51:33:c1:1b:1d:35:14:23:19:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=0a99316a1485074517b979bc2316b6d516116a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:86:c7:39:96:a7:9d:f1:4f:7e:14:25:08:
c3:68:e0:91:85:71:56:4e:32:a2:8f:be:73:4a:da:
c7:11:f2:f5:ea:49:7e:ae:5c:81:e7:e9:45:92:32:
41:24:ed:4a:0e:a4:4c:46:db:ac:11:2d:fe:02:69:
53:ab:17:4d:51:f9:1e:5e:88:8b:55:89:8a:08:92:
49:ff:56:a6:7b:0b:65:66:f4:61:d9:d0:58:30:9b:
4d:5f:42:a8:46:66:93:b1:63:df:a6:38:a8:58:95:
e7:54:e7:59:49:1e:a0:03:2f:b4:28:01:c0:3b:d1:
dd:f5:ce:5c:bd:34:2c:27:d6:bf:eb:b3:f0:13:98:
70:dc:34:9d:b8:4d:51:b5:7c:22:df:de:56:4a:50:
bb:0c:d6:61:10:3e:b9:d4:90:4b:ec:80:db:27:bb:
c2:d1:88:cf:ae:08:80:53:2d:9e:c5:91:f8:ce:aa:
7d:c4:2a:2e:43:2e:13:a9:66:f6:aa:67:c1:7c:d5:
2f:64:3f:43:63:c1:ed:ea:c1:54:42:43:87:1d:72:
88:9c:57:1b:07:08:d7:02:94:f6:29:d4:0a:56:a3:
f5:ff:2b:d6:c7:20:8d:48:30:27:86:47:06:e5:ab:
23:75:0b:14:7a:79:ff:89:47:1c:93:b5:36:38:1e:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:31:6A:14:85:07:45:17:B9:79:BC:23:16:B6:D5:16:11:6A:99
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6b:a0:79:6b:93:8e:41:be:38:c0:b7:58:86:cb:40:f1:c3:
2a:18:7a:1e:c7:40:b2:36:96:ee:be:6c:fc:24:3b:56:17:73:
22:d1:b6:02:cb:43:d1:8e:6a:98:03:4f:ee:ae:32:1c:f7:80:
7c:60:8e:5d:5a:8c:2f:cc:bc:90:75:18:d7:9f:07:10:c4:ba:
3d:47:d7:39:e8:11:4d:01:8f:59:78:5c:d4:c6:35:34:ba:32:
6f:0d:a5:ea:d4:d8:27:d7:8e:6c:0e:8b:c5:28:94:b6:60:28:
8e:08:89:4e:d6:eb:e1:ef:53:82:23:1c:6d:98:86:1c:c7:da:
92:1e:42:6b:c1:6a:f2:84:21:ec:bf:d6:72:1c:50:fd:f3:50:
e9:9f:3f:c3:09:e6:1c:ef:24:b3:70:25:63:83:1e:e6:98:6b:
51:85:17:80:03:98:18:3e:a3:11:54:f5:f1:3d:d2:df:73:5c:
96:1b:dc:81:6e:5a:e0:6f:18:68:21:94:21:a3:21:b6:e2:32:
20:33:d4:6c:93:df:ba:12:70:cd:db:69:2f:96:b9:55:62:43:
37:ae:71:4d:02:05:1c:94:2f:33:72:11:b1:e1:4e:41:ec:28:
a1:7a:77:27:f3:7c:79:fd:a3:06:85:57:17:c0:4b:80:ab:bd:
4f:24:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:03 2025 by rpki-client