Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: QyZX3uwzMtC9IA+wOeQos+K1J2PMo7zXsCVJ+pmTyQ0=
Subject key identifier: 57:30:57:D0:52:A1:EF:A0:A7:6D:4B:04:51:4B:E7:75:9F:D1:52:04
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0194BBCED3B8873568C2A2D86B3FAAFF844E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 094C
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: ojz0kzQ76K2ukF9RMed/aK7FmzOxX8fkiuSazJ8ePj8=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:b8:87:35:68:c2:a2:d8:6b:3f:aa:ff:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=573057d052a1efa0a76d4b04514be7759fd15204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:ba:8a:15:de:77:c9:4c:61:42:7d:46:b5:
b0:fd:cf:1e:fc:bc:56:6c:f3:1e:65:de:e9:61:52:
db:8c:bc:c0:36:35:ad:36:c2:74:0e:60:4e:89:4c:
3a:8f:d6:17:13:ee:67:60:1f:69:47:31:bf:5c:db:
4d:8b:d0:ef:68:a7:98:07:90:0a:49:a2:d4:2f:ae:
43:89:43:88:cf:fe:be:ed:9e:e2:d0:b4:70:91:b3:
c6:09:a3:24:bf:b1:fb:23:bf:5b:43:94:3a:6b:15:
e1:20:9d:db:5c:ed:d8:03:c1:a7:fc:a9:ca:3b:3a:
9e:d4:fa:2c:0a:5e:f9:30:19:8d:1a:a4:7b:38:ca:
e5:03:b2:d8:27:e2:54:6c:44:33:f1:eb:f5:78:60:
78:84:d9:b4:52:aa:ce:f4:ed:3d:5f:bf:d8:06:c4:
ff:38:d5:c4:40:96:6b:6d:13:73:96:83:47:c8:12:
52:34:d1:f2:90:1d:35:17:90:70:cc:6c:1a:08:24:
13:76:9b:0f:cd:f6:ee:3a:b1:ef:d2:c6:25:4f:c6:
d2:44:74:cc:b0:e3:e4:43:80:c9:1b:28:d8:ce:54:
69:22:f2:48:20:3c:49:d0:b5:7a:3c:26:1c:6c:71:
22:8e:5f:c9:73:12:5c:39:87:37:c0:4d:b8:4d:8c:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:30:57:D0:52:A1:EF:A0:A7:6D:4B:04:51:4B:E7:75:9F:D1:52:04
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f9:7e:17:60:5f:7e:4c:c9:59:2c:7c:9f:39:50:53:5a:7d:
48:9d:dd:ae:76:02:1b:6c:05:5c:fd:12:ff:f2:07:96:89:67:
90:3a:32:d4:34:c6:20:e7:2c:59:32:52:76:c1:7c:c9:77:45:
af:18:e8:c7:2a:61:84:77:1a:e4:8e:a7:2b:eb:00:5e:94:a4:
31:0a:95:1e:4f:de:1d:99:05:2a:f3:6b:f0:4a:b3:25:b8:92:
9a:aa:06:77:6e:34:d7:b7:e5:34:f2:e0:90:87:3c:93:09:39:
b1:28:ff:35:d3:02:27:47:f2:ac:7c:73:e1:a3:7a:e6:f7:1b:
ab:0f:fc:15:c2:3b:8f:d3:b5:e1:63:94:78:b9:39:41:23:fc:
11:76:25:94:61:59:1e:48:df:08:c7:82:2f:1c:f6:5d:de:93:
9d:0a:1a:93:d0:05:85:9a:bc:f0:bb:47:2a:2e:f8:61:5f:66:
58:54:48:a7:24:7e:44:bb:f9:c0:c7:3c:7b:0d:95:18:1a:fd:
ca:44:82:90:fa:60:76:cc:b1:71:85:c3:9a:0f:bf:fa:44:7c:
3d:5c:73:5e:b9:1a:aa:6a:5e:c5:08:be:2a:de:0f:fd:51:ed:
53:1d:3b:95:9d:a7:a4:47:c5:33:a4:ba:97:93:60:59:ed:73:
e2:72:a9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:42:23 2025 by rpki-client