Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json)
Hash identifier: wa9zPvZnlkUuTNqR0nTit+Vabt4F+paavtZmJY7Umf0=
Subject key identifier: B5:AF:A3:E5:8F:53:0D:98:CF:21:7C:B1:75:D0:F1:6C:2B:70:36:79
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0194BD85240D9B800C96FDFFB36C9EB838C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
Manifest number: 0F4A
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: ilENYgKxOsg1GH5gprAndk53r2ACyH4hBENlqqMIYu4=)
2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=)
3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=)
4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=)
5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=)
6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=)
7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=)
8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=)
9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=)
10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=)
11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=)
12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=)
13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:0d:9b:80:0c:96:fd:ff:b3:6c:9e:b8:38:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=b5afa3e58f530d98cf217cb175d0f16c2b703679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:1c:4d:16:97:90:e8:52:3a:2a:bd:d3:b2:
ce:ff:b9:2a:31:b6:8a:4a:47:d6:47:35:ea:7e:13:
9c:bf:cb:89:0d:0e:31:ba:eb:a3:aa:3d:41:5f:4f:
e4:fd:72:9d:87:b2:1d:de:69:22:d3:00:fb:e8:be:
28:75:d4:07:6f:0b:8a:94:7b:31:46:df:70:75:63:
b3:37:0d:45:0b:b3:27:02:dc:9d:c3:26:e9:c1:5a:
1a:01:ff:2b:2a:5e:5f:30:09:5c:69:41:ac:d6:6a:
77:ae:4c:a0:07:a8:09:25:15:e7:6f:85:63:84:02:
ea:7d:5f:06:c3:8f:5c:9c:cf:af:b4:db:44:62:b0:
9b:32:66:15:5d:ae:6e:b5:c7:b3:57:05:d7:db:7e:
b3:a3:bc:cf:b6:c9:2b:50:44:cc:59:f7:4f:1e:f1:
1c:d1:7f:06:ea:eb:b2:9c:6d:16:92:0a:a5:51:cf:
28:87:7f:bd:d7:61:df:fc:df:f8:af:b0:e6:27:34:
42:cd:e3:48:e6:c8:c0:94:95:57:60:11:ee:b4:dd:
9f:cc:22:ad:6d:6a:8d:c1:bc:02:48:70:c5:bc:11:
80:d1:cd:44:0d:5c:6f:a3:a8:02:0b:e1:a8:61:94:
74:6e:b6:bb:ae:00:2d:03:e7:ec:94:0f:44:8b:5b:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AF:A3:E5:8F:53:0D:98:CF:21:7C:B1:75:D0:F1:6C:2B:70:36:79
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:6c:c4:5b:80:93:c2:b2:91:db:cd:73:6f:e1:80:a5:96:
92:cc:86:02:42:db:78:f3:46:c4:8e:41:38:35:f6:6e:52:f0:
9d:ff:57:a7:71:bc:a7:14:c6:1f:e2:f5:ed:03:47:d4:e1:d0:
82:0a:74:5d:2c:84:2e:cc:fe:ab:b8:2d:62:ad:c3:bd:47:b1:
84:7b:c3:bc:5e:bc:5a:1f:22:66:65:6c:d5:b5:91:54:ac:06:
d9:11:7a:5d:3d:3f:77:e9:1a:36:d6:3a:90:fa:88:de:d4:c0:
05:7c:0c:6e:7b:f1:20:1c:9e:17:d0:24:c3:1d:32:62:64:41:
6c:c2:f1:a2:50:a0:4a:89:fb:82:73:3d:39:6e:4a:9d:75:b4:
77:52:10:4b:97:06:c9:ac:95:86:11:e6:c4:6f:15:24:43:4b:
bb:58:07:85:c3:16:29:bd:58:ef:08:d5:b2:a0:6c:90:27:46:
2f:83:32:3d:9b:5c:ea:c2:9a:d8:93:e8:ec:92:0e:bf:7c:98:
25:e0:8f:9c:42:7c:bd:26:97:f6:a6:d6:0d:be:c6:b6:9d:3e:
6d:80:23:5d:82:82:25:53:fc:9d:f8:84:8f:cc:80:a2:bb:5a:
b3:89:4e:e0:8c:73:78:09:09:19:48:e8:e5:2f:75:5b:a2:21:
eb:ef:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:36 2025 by rpki-client