Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: tew5LP4Wz+whWxNhY7nXgzj0ULBIQR6Uicg2fQKz9tU=
Subject key identifier: 9E:5B:53:A5:A0:58:59:2B:76:20:BF:65:15:10:83:16:9B:0D:0A:F6
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 0194BBCDBF6CCE7657B83C56E3B0871D5506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 0C2A
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: LRqffu4Bu+PdgQeBuKGn5dcdcEnlVrhbdd+Pfak8BWw=)
2: c4vhQn8zi1dmhfuFlEzS457ekqY.roa (hash: K0d7LR2NOcizL+J6fo8ZUFPUHzj1ReR3yGovArPpqzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bf:6c:ce:76:57:b8:3c:56:e3:b0:87:1d:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=9e5b53a5a058592b7620bf65151083169b0d0af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:87:29:7a:74:a7:80:64:32:1a:0d:56:36:e6:
50:01:e3:b7:35:8e:5d:c8:0a:85:5a:39:2e:da:3a:
f9:ff:a2:fd:32:7f:80:88:4e:ec:92:3b:f4:1f:47:
50:e6:a6:df:b8:d8:5e:06:6c:10:ce:0e:e6:71:0b:
e7:06:ce:e9:0b:ba:63:b0:14:48:9b:d3:9a:00:04:
4a:b7:78:ae:8e:97:3f:01:f3:15:5b:43:9c:5e:8c:
90:5a:8f:f9:6a:34:42:d4:bb:34:8e:cc:e6:1a:1a:
cd:5a:f4:a8:48:10:c5:61:ce:da:31:c8:31:7c:6c:
33:d4:cf:99:46:2a:c0:d1:f5:a0:56:2d:64:35:cb:
0c:f5:0b:7d:68:1a:42:67:e5:7b:8f:40:86:50:62:
3d:65:10:76:92:72:98:e3:d0:17:c3:bf:ab:8d:78:
e7:f0:64:73:fc:ee:7d:93:5b:cc:fb:1b:cd:d6:9f:
4e:e5:f2:d9:f4:62:f3:39:73:db:da:c4:86:60:c0:
38:db:2c:a5:ba:4d:a0:1b:a0:95:16:56:34:3f:a7:
20:71:12:13:4e:2e:9d:09:34:c7:8a:38:b6:16:7f:
9e:91:cb:4a:cc:95:99:5c:4f:ce:24:0d:96:6e:66:
c8:4b:42:a8:a5:5a:ff:91:5b:36:1c:16:2c:f7:ea:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:53:A5:A0:58:59:2B:76:20:BF:65:15:10:83:16:9B:0D:0A:F6
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1a:f0:d0:a5:ca:88:81:69:e6:8f:a8:70:25:9b:b1:ac:f4:
53:2d:6e:e1:f5:f4:0d:3e:54:79:17:f7:2c:71:75:9f:6d:4b:
08:f0:b2:36:bf:0e:5a:ce:92:ea:86:24:c7:cb:4d:d9:ca:ba:
33:8a:1d:8c:8e:9e:01:d1:49:20:a4:b2:bf:da:51:ab:5d:d6:
1f:c8:df:3b:ef:77:ae:04:89:b6:6d:73:aa:00:eb:a7:2c:6b:
ec:e1:2c:72:18:0f:5d:f5:d4:3d:a9:a7:ed:42:a1:ad:45:ad:
80:01:86:76:76:de:0b:be:d5:72:68:84:e6:4c:91:a6:53:ae:
6f:db:e8:df:43:5c:40:c4:06:d4:3a:59:4d:40:00:e7:d0:37:
31:f0:86:96:f5:33:21:a3:09:e9:6f:17:40:1d:af:c3:c2:ef:
81:bb:42:b3:40:89:b2:bc:3b:78:ac:12:81:8f:3d:44:39:55:
85:7f:da:63:d8:aa:35:20:fa:9a:92:52:74:7d:5d:17:f8:d6:
09:f6:7c:2b:a2:fe:3a:e9:26:b8:f3:ab:54:ed:22:b1:e3:48:
ed:4a:da:6c:73:21:14:29:31:31:31:60:83:ff:b2:0b:ba:22:
37:73:ef:fe:d8:f3:4c:2b:ec:8e:31:21:d6:07:16:60:17:c6:
f6:72:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client