Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
File: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft (raw, json)
Hash identifier: GbJC0tuhCpBHSpRT36V4wto5zqwGn5CRNMH9SWEpbw4=
Subject key identifier: 18:99:19:4F:6F:BA:A8:67:D6:8D:EC:EC:BB:40:D9:39:ED:62:9B:68
Authority key identifier: D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
Certificate issuer: /CN=d0c3d358812e60b680e4e11632f139560bf525fb
Certificate serial: 0194BCA9FB995ADA20DCFD1FE702DC01C9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl (hash: SB8y7WJ0HBf4Pql1XImRlip8+M72U/lQQ+fTGdZswkU=)
2: HME8zGcc-HAVtbr4sZdbeNLJU5A.roa (hash: TPPi4et5FVDHl+8Hye2r4DlU6tqPyGa2KXSYWnxyrpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:99:5a:da:20:dc:fd:1f:e7:02:dc:01:c9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c3d358812e60b680e4e11632f139560bf525fb
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=1899194f6fbaa867d68dececbb40d939ed629b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:9f:a4:cf:bb:14:fb:38:b5:9b:c7:f4:76:
4d:5e:92:70:9c:ea:2e:6c:75:32:ff:1e:d4:90:eb:
6b:19:7f:a1:5b:29:c7:cc:3e:eb:98:30:98:bd:5d:
86:28:5a:1a:4f:c6:9b:9d:a9:76:45:e1:e9:d3:ee:
99:e4:bb:6a:bd:2f:79:4e:53:c7:d1:00:46:dc:d6:
e7:38:86:84:26:13:de:d4:00:da:3f:0a:33:0a:95:
7c:7b:6e:b8:aa:1d:05:dd:8c:7e:d5:d6:05:eb:af:
ea:9d:ac:72:89:f4:d9:09:16:6f:44:5f:a2:29:21:
59:c6:6f:c9:f0:6d:c5:94:cd:4a:40:ac:b6:0f:51:
e9:d3:7d:fc:4a:40:c0:7f:2d:9b:c9:18:c0:ed:cf:
92:57:81:56:41:12:59:75:30:dd:56:aa:6b:c3:4b:
41:33:52:01:eb:16:df:2c:8b:ec:9e:e3:23:f2:8d:
b4:ab:39:93:47:54:68:e1:a2:09:c6:cd:73:37:c2:
3d:ac:b0:14:f4:9d:30:68:95:1f:b4:e0:80:23:96:
79:7c:9a:3f:bd:4b:b5:85:7c:bf:71:dc:2d:cf:04:
8f:70:e7:7c:9c:d3:3f:6c:97:e5:0a:8b:ce:5c:b6:
e5:22:31:f4:7a:6b:d6:dc:cb:10:e9:56:66:34:48:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:19:4F:6F:BA:A8:67:D6:8D:EC:EC:BB:40:D9:39:ED:62:9B:68
X509v3 Authority Key Identifier:
keyid:D0:C3:D3:58:81:2E:60:B6:80:E4:E1:16:32:F1:39:56:0B:F5:25:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/da5e3b-ca0b-4fce-b1e2-5dd336f38060/1/0MPTWIEuYLaA5OEWMvE5Vgv1Jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ee:34:ec:d3:71:17:94:17:3d:95:0d:12:f9:7f:30:0c:2b:
4a:93:57:93:7c:bc:3b:07:a2:48:34:7d:9d:84:61:65:23:a3:
64:f1:4e:46:db:35:17:22:f0:ab:15:ad:c1:3d:ac:36:48:ba:
11:91:6c:3d:12:61:29:07:c4:fd:37:71:1d:30:6f:3c:a3:9f:
22:47:c4:af:9f:b2:1c:cc:03:8f:91:5a:b6:81:ce:4b:6f:7f:
06:b2:e4:98:79:8e:52:7e:0b:87:c7:e0:71:7c:fc:17:d1:02:
09:2f:d8:21:d7:24:22:15:a6:51:0c:31:28:36:92:d6:70:a7:
1f:65:2f:d9:d1:fc:d2:e5:e6:ac:e9:2a:7f:6d:c5:69:d1:93:
62:79:e4:6b:a8:7d:c2:a9:36:40:2b:ae:a5:3f:c0:fc:2a:a4:
f9:06:73:10:f1:4d:f2:bf:33:91:13:e1:8a:40:d0:49:1a:f4:
5b:e3:09:e9:10:51:5c:b6:89:c3:64:67:99:99:54:2e:3e:4c:
da:fa:15:b6:4a:46:22:f0:99:5a:7e:ed:fb:39:ed:57:7e:26:
7b:8c:73:56:50:d2:e8:88:42:a5:66:04:64:be:8b:be:e1:2f:
ee:99:89:bc:35:08:ef:2c:9d:b1:d6:a6:9a:d5:7e:b7:c6:b1:
70:73:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:10 2025 by rpki-client