Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File: 0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier: e7d1Y+5IgIpKMWCFm3woFgyL/YY7VOwkc+rC4LT23p0=
Subject key identifier: BF:FA:F7:C5:38:E6:21:FC:B8:46:F6:5C:7A:B4:59:F5:B4:0B:54:04
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer: /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial: 0194BCE08C88253FD2A07B8AEBCD06745AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: T+Nf+DS/cVXOSMl/bzIGo/gli8cIeBtXE8bK9AWGmHU=)
2: WtuPQAz22oEnCEx3Rc-9J0U0Qbk.roa (hash: LqsVaHB6US9lWput6TNuWvOyM8xnvQFU16n5uBdiSPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:88:25:3f:d2:a0:7b:8a:eb:cd:06:74:5a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=bffaf7c538e621fcb846f65c7ab459f5b40b5404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:e0:c8:a4:2f:0e:a3:cf:98:9c:be:9a:ac:
84:3a:d7:c4:a7:ef:24:47:6b:8e:cf:ec:e8:5d:1d:
97:54:bc:50:08:4f:cf:4d:6f:48:b0:68:62:2b:7e:
2b:f0:5a:0a:12:82:e2:69:4d:77:3e:bc:bb:2e:18:
fa:49:31:65:b8:2f:19:c5:7a:41:6a:df:fe:6f:7e:
61:cf:a4:1f:f9:5b:e0:c8:1b:57:f1:7a:0f:27:4a:
a7:59:3e:a0:2d:52:c1:b6:e3:41:02:40:08:8e:0e:
8f:24:ef:6e:cc:ec:ab:1b:1b:e7:84:84:24:f9:6e:
44:49:1a:55:c9:8f:d7:18:6e:83:bd:e4:aa:da:eb:
07:e3:05:14:22:12:bb:75:50:3c:dd:05:2f:17:a1:
59:d2:66:7b:83:63:5b:f1:81:b0:08:c6:d5:3d:ae:
55:a9:96:fd:d5:49:cb:49:5e:f6:a0:dd:ee:66:60:
ea:25:9f:13:10:c8:3f:8a:17:7b:b9:c7:8b:b5:c5:
e7:8a:dd:8e:88:a0:65:6e:a8:60:43:9e:a2:3b:80:
61:c3:21:67:59:ca:dd:3e:e2:f4:ad:e2:c2:0b:8d:
1a:7b:cd:7a:cd:ce:9a:b8:5d:7e:d0:22:df:1c:82:
e1:66:7f:df:14:53:07:ff:e7:22:71:13:0a:cf:94:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:F7:C5:38:E6:21:FC:B8:46:F6:5C:7A:B4:59:F5:B4:0B:54:04
X509v3 Authority Key Identifier:
keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:48:94:c1:0b:ea:be:16:66:e3:b3:7d:1a:a7:86:51:d7:2a:
b0:f0:da:76:07:e9:17:94:ee:94:85:06:39:24:8a:2f:7d:55:
c7:24:09:48:c2:aa:fb:23:69:ac:fd:80:1f:ca:9f:c7:29:a2:
e9:77:19:52:14:1b:11:76:20:0b:58:13:bd:ec:71:f2:50:58:
1c:22:97:65:80:86:58:18:d7:eb:0d:1f:e3:9f:6f:5e:de:6a:
d6:15:97:e0:b6:00:89:a8:e1:06:9f:ca:ba:10:bf:c5:76:64:
a7:92:7d:44:b3:e0:40:7a:72:db:51:dc:7d:0a:55:c9:a4:bc:
4d:bb:11:2d:df:02:5b:12:04:12:b4:28:e2:f5:11:42:12:05:
1a:cf:f1:b4:5f:05:87:e0:49:72:e1:02:43:5f:60:71:89:11:
ea:72:95:97:f2:79:12:9c:b2:3a:b5:a1:ed:71:ef:7e:22:e8:
b6:cc:80:9f:a9:9a:30:18:23:0e:6b:9f:25:33:df:e3:68:de:
2b:aa:14:a1:42:2f:0b:60:f8:f6:58:93:f3:63:b4:81:7c:57:
9f:f9:ee:01:6a:72:31:02:55:80:58:eb:05:09:7f:6a:78:dd:
ae:5a:79:0b:97:61:73:b4:d3:93:6d:6e:84:d6:0e:5b:41:8b:
8c:df:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:28 2025 by rpki-client