Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: E+TaiTHMao7o9FPMqt0A3rX8gOgpr8bxK75NHSfVIAQ=
Subject key identifier: 78:21:26:D2:98:E8:18:1C:7C:21:27:B8:A4:0C:9C:24:B6:88:BF:B9
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 0194BC3BD31FC4BC774E01B4F66054761EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 06BD
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: B7ECSgvwkDbrRODmuZITwcXyCX9um1Vkzk3C2V9oxeg=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d3:1f:c4:bc:77:4e:01:b4:f6:60:54:76:1e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=782126d298e8181c7c2127b8a40c9c24b688bfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:38:43:a4:41:ca:d4:61:32:ac:5c:2e:a6:
f1:b2:58:ed:5b:2d:c8:38:54:fe:16:0a:39:f5:10:
fe:44:ea:f3:e3:a0:68:3e:7e:8e:4a:0a:8f:0e:03:
48:18:f1:fc:c0:b3:d6:bb:56:74:0e:58:a1:5f:f3:
2c:69:bb:f7:fa:c9:88:de:17:97:3a:86:e3:dc:de:
89:0c:49:cf:bb:ca:db:0f:19:e0:bf:b0:ca:21:ec:
f9:4a:31:14:5f:55:71:e5:8f:a0:0d:d7:45:50:8a:
b8:b0:99:76:3b:23:81:6d:a7:10:a8:f5:fc:cd:38:
e4:13:e4:a7:5b:e1:0a:96:0a:2b:36:0d:0a:48:4b:
2d:94:32:cd:e3:02:7b:52:b1:8b:6b:1f:b0:e6:7f:
46:99:d1:9f:47:07:6d:4b:92:8e:1f:dc:67:af:cb:
8b:91:72:1e:88:76:c8:20:b7:c7:9a:2f:d3:80:05:
bf:9a:7d:e6:91:57:62:30:4c:80:ec:19:b2:d6:20:
7c:cb:e8:03:87:f8:3e:91:8d:03:e0:87:37:96:6e:
05:e2:3c:e4:fa:9e:e6:8a:90:30:86:cc:3e:3e:7b:
b9:98:24:d5:da:e6:da:24:81:91:37:c0:bc:99:c7:
a7:af:d9:ed:51:6d:53:02:bd:d2:3c:0e:16:3a:08:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:26:D2:98:E8:18:1C:7C:21:27:B8:A4:0C:9C:24:B6:88:BF:B9
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:48:c1:1d:a6:48:65:3a:9d:5a:af:f5:77:ec:23:93:a5:
45:70:05:57:ff:ae:ab:c5:8b:13:50:64:59:3d:e5:8d:70:06:
80:92:80:a0:d9:53:6f:77:b2:21:ec:6e:ed:cd:70:63:d5:86:
a5:f7:ea:0f:5e:75:40:9b:6a:59:f5:93:95:42:e6:6c:5a:5a:
a9:d0:d2:6f:77:53:b4:99:d3:87:59:89:53:59:9c:ad:71:f5:
07:60:c8:b3:34:5f:2f:51:74:ad:96:4b:90:4a:30:22:9b:85:
83:30:15:c5:95:8f:03:5e:b0:5f:71:01:43:69:c9:9a:eb:54:
cd:61:43:72:20:63:a5:00:b9:2b:59:79:3d:d8:e1:d6:09:95:
50:24:61:ff:60:ae:a7:dd:ce:95:81:09:c1:69:a9:7b:1e:6f:
31:22:2d:f7:33:31:a7:a0:95:22:d1:9f:0a:2a:d9:93:df:46:
64:03:91:1c:df:f2:36:35:cc:1d:57:69:39:6a:47:38:e0:6c:
dc:34:b6:6d:14:36:8f:f6:ff:33:f3:cb:dd:11:1b:06:e2:7e:
ae:73:ec:b1:cf:87:4a:53:f9:af:f4:34:a5:40:0f:51:a8:a3:
5c:0e:82:39:e5:c3:de:fc:20:22:10:67:1a:57:68:cd:cc:60:
d0:55:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client