Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: XSuOnj2R8Dx/i0Oa0GUwCV9JXrHThSfHJm2zGGUC8RU=
Subject key identifier: A3:5B:F9:21:80:56:3B:E8:48:74:AA:B8:18:7B:B2:C4:DE:C5:BE:74
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 0194BCAA0204677DF9A4DEA79A37C9A4E0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: M6jpp89m6TXDay9LdFlcbFlOeS9c9wekF5E7Kieh42E=)
2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:04:67:7d:f9:a4:de:a7:9a:37:c9:a4:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=a35bf92180563be84874aab8187bb2c4dec5be74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cd:2a:c1:8d:19:db:ec:62:c4:cc:31:f2:2a:
d0:3b:d6:49:ab:ba:8d:ff:5d:dc:08:23:b3:45:b7:
70:f8:ea:4d:28:09:bb:17:fb:6e:9e:41:9b:44:a0:
c7:16:08:e9:e2:47:f0:f9:e0:17:94:17:38:23:91:
da:1a:07:df:8a:62:96:2a:c0:57:fa:5b:60:80:f8:
90:8c:34:c4:c7:ce:33:c9:05:75:be:36:03:df:7d:
95:d7:3f:39:db:bc:70:3f:f5:b8:79:26:29:2a:a0:
b4:71:bf:84:8b:71:68:6a:c8:e9:b0:48:9e:ef:cd:
11:ed:06:ce:bc:28:1d:e9:a4:b5:91:62:66:12:ed:
7b:b2:29:53:ac:0d:8e:64:37:d7:b8:3d:1a:dd:e9:
c9:ad:d2:05:09:27:ea:39:2f:b0:57:7b:80:e6:40:
34:75:d0:86:67:9d:69:87:75:b5:ed:8f:c7:e7:7b:
ad:46:87:7f:a1:23:ea:6e:3e:3e:3c:61:2d:ee:e8:
1b:69:6e:00:ab:1d:1d:8b:e7:70:ec:ab:d6:d9:cb:
1a:09:ca:23:85:b3:e6:35:36:17:a5:88:42:00:4e:
78:af:87:a4:ad:2b:bd:8a:96:51:79:2f:11:ba:ce:
27:57:4b:2a:ff:f6:6a:78:ab:4a:8a:b5:23:12:60:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:F9:21:80:56:3B:E8:48:74:AA:B8:18:7B:B2:C4:DE:C5:BE:74
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:31:86:28:fb:6a:2b:bf:3f:80:98:bf:81:34:38:68:5e:
f1:d3:f2:21:c5:ef:35:91:0a:2f:dd:fe:34:c8:bc:35:19:06:
e0:1f:5f:c8:bb:8d:6e:85:86:8a:2e:54:ed:0f:4d:87:d4:4e:
dc:30:e8:a0:02:fe:85:ac:8e:17:27:2c:b8:81:3e:5b:fa:31:
0e:83:01:80:1a:20:e4:4b:78:8a:4c:17:00:79:13:90:b1:b2:
35:73:3b:d8:2d:07:01:03:00:5d:dc:18:12:67:b4:8f:5a:05:
26:79:ed:85:e6:66:9d:48:cd:61:3c:8c:92:d5:7b:64:08:e6:
c0:81:44:c4:3a:17:3a:b6:b7:0c:ed:06:f9:ce:18:22:86:23:
5c:af:50:bd:1f:01:90:20:29:39:ac:92:b7:b8:8f:48:79:8f:
84:61:f9:ac:e1:d8:ad:53:b1:df:e7:55:73:37:f0:14:26:7c:
61:3c:d3:c5:e3:2c:5d:21:af:bf:3a:2e:2f:18:18:d1:76:fd:
48:6b:7a:81:40:96:e2:f6:95:7a:94:b7:2d:6a:3d:61:c3:93:
48:8b:0c:0f:f4:3f:4e:0f:fb:b5:31:51:b4:0d:90:69:05:5c:
43:47:54:0f:4d:84:43:b3:97:54:52:e4:2f:8e:0e:71:6d:bc:
33:18:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:40 2025 by rpki-client