Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
File: 8OlKP3YsIdcztI_yssV0VgXCvjM.mft (raw, json)
Hash identifier: GKa1iZHH76jxwB1nhSTWMl6UGPKs3htBuipmHfzgfgA=
Subject key identifier: B6:59:26:B2:5E:BB:0E:9F:2D:35:D9:0C:EA:C2:70:3F:90:EF:09:F1
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Certificate issuer: /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial: 0194BCE0609D3A11E52D58919D317176FDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
Manifest number: 0EC9
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: 8OlKP3YsIdcztI_yssV0VgXCvjM.crl (hash: 7JmecU5hKlv6UqCDDZ9EoNQ8qUTJ32Db743M4b/o3fU=)
2: NR9HV4acGoApHHDJDWYupOCz2zg.roa (hash: FriwYpmfuXTn7afUyv1p7OwXj5qQDdCL6/trn8iuuXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:9d:3a:11:e5:2d:58:91:9d:31:71:76:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=b65926b25ebb0e9f2d35d90ceac2703f90ef09f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:c4:32:5c:41:e4:b8:ee:9c:fc:b3:5a:01:
34:d5:70:0c:54:e5:30:86:32:c8:26:69:bb:70:74:
e4:80:7f:57:9c:d9:81:58:02:5d:7a:36:32:a4:d9:
40:49:05:bc:2a:ec:e5:38:8a:1a:ef:a3:ef:29:ea:
27:f3:0f:72:06:d1:bf:1d:60:61:3f:dc:b2:c5:12:
aa:8a:8b:d4:f3:26:49:7f:81:42:b3:8b:58:04:48:
57:09:20:7a:43:b0:8f:94:92:56:dd:86:69:ec:a2:
60:b1:60:a0:99:da:63:34:a7:eb:67:1a:db:52:58:
5a:fc:4b:aa:56:72:e0:5f:1b:76:45:be:d3:91:ee:
fe:52:6a:cf:05:8f:fb:b9:61:e7:99:ee:aa:4b:f6:
8b:8e:b3:d6:9e:4f:b2:1f:06:2d:d5:bc:f3:4a:db:
58:a8:ca:9b:a1:27:7c:c2:19:82:a2:42:74:5b:3d:
dd:44:2e:56:ad:47:20:7d:5f:49:c2:87:e7:5a:db:
a9:bd:9a:4a:25:31:7f:00:04:d3:4f:93:84:c3:dc:
47:c8:5e:dd:8d:ca:44:02:1b:26:4c:9d:d0:26:76:
cb:92:f7:9a:71:55:5c:89:6b:0f:d7:0e:73:68:7a:
26:16:a5:34:8a:b6:77:d0:74:18:49:f3:45:60:4c:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:59:26:B2:5E:BB:0E:9F:2D:35:D9:0C:EA:C2:70:3F:90:EF:09:F1
X509v3 Authority Key Identifier:
keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:99:31:d3:ad:bf:66:b0:eb:89:24:12:a3:1f:4f:62:de:
bf:80:b2:9e:69:52:f7:f8:08:0d:5d:4e:0f:15:ec:39:0d:9b:
ba:d8:0e:63:f7:9a:6d:15:67:84:a9:05:4c:5b:ba:ef:ad:bd:
7f:d4:cc:65:5a:a7:0d:26:d6:62:72:d2:98:c1:32:bd:5f:99:
1b:60:30:51:5d:5f:cf:cd:c2:db:83:52:fc:df:5e:23:d5:53:
40:b6:54:57:7e:a5:e3:d6:24:b8:a6:54:51:96:61:41:4d:7e:
f2:2d:46:23:24:9f:79:e6:c2:4a:16:d5:95:6b:3f:bd:5a:2b:
89:3d:fd:02:a6:dd:3f:9a:0a:a9:d7:ed:b1:ad:01:89:00:43:
15:95:df:ad:79:fa:2e:98:c8:bb:4e:7e:89:3b:6a:bd:9c:86:
18:ec:31:84:d8:8b:60:df:e2:67:dd:16:1b:84:94:d4:fe:24:
10:75:23:f4:14:7c:92:28:e3:16:48:bf:ef:84:ba:3c:29:39:
7c:aa:0e:fb:9f:a9:1d:87:da:17:91:20:61:1e:c3:dd:0f:67:
9f:2e:20:3b:56:66:c9:59:d7:7e:58:d5:66:af:36:27:1a:bd:
87:dc:a8:91:fa:9d:10:a2:e7:c7:ce:fc:f0:88:4f:d3:48:fc:
f8:30:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:57 2025 by rpki-client