Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
File: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft (raw, json)
Hash identifier: KILF8Mtzm/bboCk0HuP5TITim4Hj44ZmdTfDIIwdi+w=
Subject key identifier: 58:FD:2F:59:15:EA:4E:6D:A3:3C:72:F4:B7:EF:9F:4C:45:AE:4F:29
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 0194BC3C0EA577499CC76FD3A9B0E4A17321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
Manifest number: 0280
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl (hash: 2cQVVIM34WMOSUGO4Dw60Ev3ZWRtnGNklMuaKtqmH/Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:a5:77:49:9c:c7:6f:d3:a9:b0:e4:a1:73:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=58fd2f5915ea4e6da33c72f4b7ef9f4c45ae4f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:33:f1:aa:bd:52:c9:7a:89:d1:16:b2:96:
af:46:8c:a3:28:e3:d9:cf:80:c1:8a:fc:bf:11:bf:
2b:72:4a:01:b0:cb:b7:cd:7c:f6:1c:bb:9c:cb:95:
d6:a8:63:12:c8:64:d0:6b:8b:98:97:8f:18:2c:6a:
f1:11:fb:ea:69:79:99:eb:92:32:67:09:8b:2e:ac:
3f:c7:03:a6:ef:93:d9:72:e9:37:c5:ab:93:06:5a:
ba:c9:a6:63:36:e0:47:9b:9f:59:5c:75:e2:b6:84:
5a:ff:3b:e2:71:30:b1:bc:26:97:73:f2:fe:08:3d:
b5:ec:eb:dc:41:5a:6a:4f:82:da:75:d8:23:34:32:
cb:ab:35:31:8b:84:15:79:3e:0a:bb:30:85:56:f3:
d1:20:24:f8:48:cd:17:2e:22:70:cf:3d:4b:b1:74:
e6:f3:d5:ea:db:62:8a:19:1e:5a:94:91:aa:06:e6:
82:b5:7c:dd:1f:8c:e5:c3:e3:0c:00:ea:10:32:41:
7e:4e:47:10:10:d9:ca:ec:3a:9e:91:ad:c0:96:d9:
ef:3d:4a:1f:5e:fa:c6:33:e9:d8:02:9d:31:a8:63:
02:d8:e7:b8:d1:c2:fa:9e:db:40:99:ff:56:51:0a:
9b:ea:93:06:e8:1e:dd:dd:63:6f:3a:9a:bb:ab:ab:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:2F:59:15:EA:4E:6D:A3:3C:72:F4:B7:EF:9F:4C:45:AE:4F:29
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:13:9f:c2:64:1d:e5:04:70:90:a2:00:d1:03:44:0f:a9:23:
f0:9e:25:d6:e2:46:26:fb:58:6c:0d:0b:6f:21:80:78:68:d2:
2f:34:17:21:03:5a:fd:e1:fd:90:67:b2:10:e7:54:f1:31:0d:
a5:e3:4b:00:03:08:02:b5:e8:46:53:f1:71:03:a3:be:06:04:
14:3b:04:09:71:7c:34:22:17:ac:0d:18:67:98:dc:58:da:2d:
6d:50:49:aa:cf:ff:59:13:87:b0:ef:5f:03:2a:21:a8:a4:c4:
6a:57:e7:cd:b8:1b:3e:39:ab:da:11:64:3b:74:f6:e6:9b:73:
ef:eb:60:7a:f4:46:4a:82:33:ab:a1:de:7d:2a:a9:06:1d:8d:
b8:bc:4e:1e:a1:77:48:29:20:69:6f:e8:98:b4:e3:f6:57:fe:
12:77:33:33:ba:87:af:5b:c8:72:9e:01:76:a7:62:32:1c:3c:
21:5b:62:19:91:fe:07:22:18:d9:a4:92:2a:6b:10:18:46:39:
2c:f8:8b:57:39:f5:91:b6:f1:fd:39:f4:94:65:b0:8b:ee:17:
b4:c4:21:80:27:e2:18:2d:51:3f:dc:68:14:28:b9:9c:1a:91:
a4:dc:b0:a3:64:27:11:52:31:34:70:5c:06:28:e5:eb:9c:c7:
84:a3:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:09 2025 by rpki-client