Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: T7yUQsoiJBRsirp7LvxPO1zJVmL3u9Eac3Q1PmpHJv0=
Subject key identifier: 54:14:26:A6:61:F4:C6:C0:0D:68:50:52:B7:5A:8A:0E:71:A7:5E:F6
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 0194BCA9CDE4B8664FA83F85D9092337D651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: TE15uM7DgDGNwCHu8QdLCBZl793iinYjQVeudyFQ6CQ=)
2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:e4:b8:66:4f:a8:3f:85:d9:09:23:37:d6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=541426a661f4c6c00d685052b75a8a0e71a75ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:96:7c:eb:84:bf:65:35:c6:9e:ad:d3:e3:
d8:aa:3a:e6:5f:93:9d:a7:c3:2d:5b:ff:bd:c2:67:
cf:c2:0f:cb:dd:1b:3c:2f:35:78:c6:8f:a2:8f:c6:
d4:fc:69:5a:7e:8c:f8:7c:aa:7e:ef:b3:05:c0:a7:
5b:56:78:9d:73:64:22:60:03:31:50:bd:3f:83:01:
4f:5a:af:5b:ab:a6:82:ca:95:aa:17:b5:09:0c:3e:
27:8f:30:c1:91:db:d1:39:7c:38:97:b3:83:07:61:
f0:be:e1:f1:0f:9d:a0:b8:e1:29:d7:df:67:5d:48:
5d:04:6f:05:d5:60:3a:ee:0e:fc:58:ab:2f:65:fd:
26:c6:51:77:0d:64:ba:87:3e:40:f7:71:28:f1:71:
47:34:9c:0c:60:36:76:ee:d2:63:13:df:ce:fa:d5:
dd:66:a8:f1:ca:63:1b:dd:10:1b:d3:ab:7f:00:ff:
bc:82:45:9e:79:70:4a:ee:36:3f:4a:b6:a7:20:0e:
47:28:62:df:df:fe:0c:df:ee:f1:4a:74:32:ab:e7:
cc:ce:cb:89:16:e7:39:d8:b5:da:8a:c3:2d:ea:3a:
d2:5b:9b:5f:d1:80:21:01:b7:cb:34:e9:7b:b3:17:
82:0a:fb:f5:2a:98:db:ac:a6:32:fb:e7:39:ec:bd:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:26:A6:61:F4:C6:C0:0D:68:50:52:B7:5A:8A:0E:71:A7:5E:F6
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b5:1f:54:fb:b2:61:f2:96:f9:1c:b3:85:f1:1a:66:d8:da:
d5:2d:ff:ad:44:98:07:eb:7f:48:c3:ab:1d:c6:d2:f4:03:4f:
a3:da:32:a2:69:c3:22:7d:26:73:af:d7:c8:19:a0:81:9a:63:
18:c0:24:c0:bd:33:7e:f7:a8:99:9f:ec:9a:e4:b1:21:55:f2:
f5:fa:3f:bb:4d:be:b3:be:ae:2b:c8:3f:43:70:f6:68:12:de:
fd:1d:95:1a:43:ac:f4:a1:b0:84:f4:0f:3c:88:66:31:de:c3:
ec:54:46:9d:cd:f9:0b:58:55:a8:23:ec:cb:20:e7:d1:be:d4:
76:b3:bb:ab:79:48:61:ec:24:f1:6b:a4:6b:31:7d:6a:e5:32:
2c:72:4d:85:d4:5d:0c:85:dd:f8:27:b9:57:be:b0:4e:80:3d:
d9:e2:f7:be:e5:9a:52:78:4e:b2:31:f4:91:b9:f8:f8:8b:fd:
ca:12:1e:fe:f7:0c:23:80:ce:3d:69:c0:fe:01:6e:44:fa:04:
9c:97:94:fc:d4:2e:5d:a8:e1:3d:b3:61:ff:1e:9b:3c:77:6c:
38:9d:4a:55:8d:99:87:fe:e8:a3:1a:b7:8b:5b:16:5a:82:8b:
1e:7e:3d:85:9a:56:f3:b4:b6:87:2f:75:76:13:8b:97:c8:e3:
45:33:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:51 2025 by rpki-client