Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: 7UWlpSy3OQSZ9+gPxqcpgL7SLC/JvoJVqvWv2rakYs4=
Subject key identifier: 10:12:79:23:4F:D0:0F:9A:1C:0F:4B:87:CE:26:03:C3:B0:73:CC:9C
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 0194BD17A3CFEEF3D2D164272315C3CCF54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: xW1Blrvc/VctXmH5sQrwMhEcrKMJCfOC1WTlS8Q86Vo=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:cf:ee:f3:d2:d1:64:27:23:15:c3:cc:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=101279234fd00f9a1c0f4b87ce2603c3b073cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:de:0b:db:34:0b:d0:3c:d5:8c:df:38:64:
4c:36:13:b8:2a:c7:3a:11:ac:4c:7d:e0:48:5f:2c:
3b:1f:b5:6a:59:4d:d7:da:46:a7:c1:d4:32:12:d2:
a9:0d:7f:7e:63:70:1b:33:71:77:74:24:42:39:ae:
72:7e:6a:86:00:f1:f8:f9:0f:89:8c:35:9b:43:bb:
33:e7:7c:ca:59:ae:10:30:2f:88:b0:c3:c3:f6:93:
a0:0e:2a:10:55:7c:18:9d:2e:24:a1:d4:94:90:7d:
6e:33:69:c2:a6:2f:30:7b:04:ab:4c:b7:e1:b9:21:
43:24:98:f3:59:19:1f:e7:cb:b4:49:ba:69:ff:31:
b5:ac:82:1d:e9:e1:6c:17:a1:59:17:d2:15:13:7b:
f9:57:10:63:75:b5:84:db:a2:ba:7f:2f:fe:85:b2:
eb:32:e5:38:78:4c:e7:f0:8a:fd:cd:b0:a8:cf:ed:
34:5c:b0:0c:93:ac:7f:55:9a:e0:2a:ff:0d:bf:74:
2a:f5:e2:e3:05:27:90:28:fc:d9:0e:ba:0c:4d:15:
40:8a:cb:cf:5a:69:80:01:7f:39:2a:66:e8:ae:02:
d7:31:e1:35:a4:b4:4b:e1:70:13:a7:83:52:2c:3d:
a9:29:d5:10:21:08:bb:30:5c:ca:3c:67:03:96:53:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:79:23:4F:D0:0F:9A:1C:0F:4B:87:CE:26:03:C3:B0:73:CC:9C
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fd:02:65:be:7c:11:86:52:1e:f9:e0:c5:6a:03:86:e2:0c:
11:28:91:c4:83:7b:82:bb:0e:50:21:cd:96:3e:69:a4:86:a8:
37:58:fc:78:af:93:4a:a0:6b:a9:48:29:8c:60:dc:83:20:b1:
18:7b:b5:12:2c:b8:11:45:08:2f:a4:27:04:a1:1b:d5:b6:5f:
fc:80:a2:82:7b:9e:74:5d:eb:22:77:a8:a7:bc:4b:92:e2:e0:
c4:7f:ad:4a:62:f5:fe:15:d5:ac:68:58:1d:82:7b:c1:bd:12:
55:64:26:bd:d1:0b:f2:92:92:82:5d:5a:a4:2c:67:51:d7:28:
f6:06:f1:e0:e9:ec:74:e1:1d:18:aa:dd:4a:aa:70:f9:3f:f8:
1e:7c:7d:9c:15:ee:49:5b:79:19:44:83:db:a1:cc:c7:97:b7:
69:66:4c:86:98:16:57:60:c4:fa:48:bf:92:9e:4e:42:02:71:
ec:37:3d:cd:58:11:8b:88:35:5c:41:e4:c2:cd:e2:8a:60:f0:
af:36:29:18:2c:f2:a3:53:d6:61:36:2e:4a:8d:e8:bd:e7:4f:
70:be:43:86:2d:41:4a:8c:63:13:c2:b8:ce:8b:60:f4:8f:7d:
74:13:d8:18:1e:dd:2c:9c:9d:bd:ad:64:8c:e9:66:4f:69:f5:
ab:ec:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:47 2025 by rpki-client