Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: NH2tJwpFDXDDsCwjKGMnQBPLxVlFSSFHQpgODwYnlXk=
Subject key identifier: 31:FE:6B:EF:07:8A:9F:7F:89:15:FD:05:E7:13:48:D8:10:1C:2F:BC
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 0194BD4E97B37FE29086DEEBAF2E884715F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: SVdDHu+1GMw0KTdIJDJ8LrRTP1ST7zCmBcZvg/NSLB8=)
2: HMJLEkPGlr7x44aeMyDl-iD3-H0.roa (hash: L+qMMZpme30javZoQJKYZdKfiPeTzWKpuVRpIrhWgDs=)
3: Ti73dcIrlh5auWtScVzVwqOqQSk.roa (hash: bD54N27Ykt/wu2s+Dy6sKxGGg/cuSXB3DUKzM/XaSZM=)
4: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (hash: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:b3:7f:e2:90:86:de:eb:af:2e:88:47:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=31fe6bef078a9f7f8915fd05e71348d8101c2fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:40:1b:d5:d2:ad:32:df:02:95:cd:b9:75:
ba:7c:08:0e:30:a1:ca:a6:98:1c:7a:89:2c:07:5d:
26:c7:96:94:25:4a:6a:ea:6f:de:75:46:09:cd:40:
73:ab:d7:90:00:93:0a:3d:28:68:85:86:5d:ca:10:
3e:0a:a5:b7:b2:ae:80:09:47:9a:bb:a1:67:d5:38:
0e:3b:ab:9a:0a:50:ea:8a:d3:22:52:a0:51:d7:cc:
5b:52:ce:a2:f7:5c:5a:b2:f3:30:46:43:11:5d:7d:
51:59:8f:8a:d7:83:97:60:2f:fe:51:2e:f3:0a:67:
a8:42:1f:34:75:f7:c0:c5:d2:b1:cd:c6:42:e0:ff:
39:c5:87:fa:49:9c:23:73:17:d4:82:87:ac:79:88:
26:ea:c0:4b:d0:c2:fb:08:97:94:51:79:09:65:58:
5d:30:1f:74:a7:10:4e:b6:8d:4c:66:75:bc:c1:50:
c5:b8:71:83:c3:eb:d4:a3:7c:b6:8a:f0:c1:57:78:
bd:55:b1:c2:f8:0e:4d:7a:2f:b0:60:93:ba:b0:6b:
87:b3:f4:06:d5:af:c5:dc:b2:dc:9d:bf:bf:82:03:
e7:10:83:67:79:e5:b9:f7:12:d4:bd:ba:93:e6:a3:
03:33:ef:07:08:51:3e:d3:ac:b3:c1:48:db:57:7f:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:6B:EF:07:8A:9F:7F:89:15:FD:05:E7:13:48:D8:10:1C:2F:BC
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b6:aa:7f:d7:1c:79:b2:d9:e2:c4:ce:d2:17:2a:96:66:44:
23:e2:52:df:7a:79:77:10:0f:1f:ac:22:b0:40:0c:e2:27:6a:
e6:69:bb:3e:b4:1f:91:71:3b:60:fd:36:b3:bd:6d:d0:36:b3:
3a:76:ab:fc:96:30:e8:bd:ed:9b:61:2d:15:9c:16:a6:73:c5:
5c:01:86:77:fc:eb:c1:ae:ca:4c:9b:31:52:c1:4a:02:21:6f:
7d:40:09:74:db:22:3d:7f:99:03:51:77:c2:bf:58:a5:c7:38:
c9:66:05:ce:b5:e9:46:e2:49:45:ec:dd:1c:3b:fe:d4:e7:75:
cd:b7:4a:a4:09:56:e0:85:48:ea:f0:cb:09:c8:28:56:fb:4b:
5f:b9:9e:f1:6b:1e:bd:2d:86:d4:ef:ca:ad:c4:ae:8f:51:ab:
97:8e:15:f5:98:33:23:5c:3f:76:71:bc:51:db:7b:af:9b:b9:
06:c5:af:02:7d:90:e8:9d:b3:f4:2b:56:f0:81:77:bd:f2:8f:
50:c3:66:25:ff:14:3b:be:89:af:62:98:ca:33:c5:54:2b:a3:
fb:a6:db:f3:cf:b2:38:9f:7e:db:08:b4:42:c7:ae:9c:35:f3:
a1:26:13:85:85:43:7e:aa:7c:7e:f9:2f:34:b3:e5:bc:6b:d5:
cd:56:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:21 2025 by rpki-client