Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: UDsAdK3KSTDEBV32QW6yd+ByavyXOBHq3uFGRzl0z8Q=
Subject key identifier: 19:01:24:8C:35:E5:A3:3D:88:87:9A:F9:A0:A1:99:84:5B:A9:DE:13
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 0194BBCE9BF0665D67961DC784839674F646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: B+qFwoG9GIJ68OPnr0BDxpHkLGhlbUcJ+tzLgAEO2Vc=)
2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:f0:66:5d:67:96:1d:c7:84:83:96:74:f6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=1901248c35e5a33d88879af9a0a199845ba9de13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:f7:87:6f:85:25:8a:0d:12:29:f5:88:d0:
61:bd:bc:6b:76:5c:02:cb:99:e6:3a:03:51:85:1b:
b5:0c:62:83:36:54:95:49:73:40:db:18:84:48:13:
c4:64:a7:51:1a:c1:79:c6:fd:63:36:47:95:c4:49:
60:41:56:42:02:e2:d4:7a:c0:fa:01:22:22:96:57:
12:0f:b3:34:4c:78:01:05:1c:07:4c:60:4c:f2:28:
9e:cc:fa:56:10:96:ba:57:a6:c7:c9:9b:c9:35:6d:
56:3c:34:ed:5b:11:58:99:11:0a:15:74:0c:cc:a1:
ed:c2:21:f0:50:3a:7f:e7:20:8d:32:10:1f:a7:ea:
5c:64:16:cf:55:a8:b4:29:c9:d0:52:69:70:94:37:
b5:cc:be:ae:8f:56:32:d8:72:41:73:b8:d9:84:66:
aa:c9:7b:c9:a2:dc:70:d9:f1:60:76:b7:40:13:64:
cd:57:17:e0:0d:39:eb:95:e1:ef:ad:27:6c:b4:1c:
99:ef:bb:d7:ee:e4:6b:a5:cb:fe:1c:91:05:da:2e:
5c:b1:fc:ba:12:c3:19:38:6f:eb:1e:c9:b5:69:c8:
9d:1c:44:e2:d8:42:ce:fc:08:b1:0f:cf:07:66:36:
88:71:f9:8b:85:5b:e9:20:98:aa:34:17:e3:fa:ae:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:01:24:8C:35:E5:A3:3D:88:87:9A:F9:A0:A1:99:84:5B:A9:DE:13
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:52:fe:9e:a3:3e:b7:72:ab:61:ff:47:1b:91:3e:83:2a:e6:
b7:2e:d9:ba:4f:ca:f6:8b:4e:c3:07:db:96:64:5b:10:98:e3:
68:c0:47:9e:77:1a:00:a6:83:5c:a9:f7:91:23:d0:66:0e:ad:
0a:a0:8f:f3:4b:c8:17:01:3c:f1:01:06:7a:91:dc:43:43:4c:
77:bd:7e:8b:49:75:05:09:18:25:03:50:79:d1:02:e9:14:26:
58:e0:c5:ef:4e:a8:8c:a7:b8:d3:b5:09:21:42:c3:78:cb:0b:
31:ed:10:aa:4c:a4:86:68:84:94:f7:39:50:b0:f8:9c:76:3a:
c6:ba:40:a8:57:88:09:bd:fa:9a:fc:08:ad:c7:e1:34:67:d3:
3a:db:75:99:b5:4a:6e:c1:c4:fe:fa:8a:44:40:bc:11:06:e1:
7c:ff:ba:07:66:d7:87:f9:89:4b:6d:a8:6c:9a:93:7c:f8:c4:
aa:36:ec:52:ef:02:17:3a:e0:59:71:b2:a7:7a:4a:08:22:16:
f8:81:80:e3:f8:33:6f:95:96:84:65:fd:8a:c8:0b:0f:50:a0:
a2:42:fb:c8:24:4e:7a:d6:a9:1d:13:9f:60:07:15:19:80:42:
f3:e3:7b:73:31:70:5d:44:7a:5e:d3:3b:74:83:ba:f8:b7:1a:
81:05:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:07:53 2025 by rpki-client