Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: HHnMTiI8FK4D1Sp6L8zRJgqRikkPhObI30rV4ycxpMo=
Subject key identifier: 0A:B3:4B:DB:11:D1:2C:38:F4:17:32:4C:23:A5:F0:D1:B8:FA:60:1B
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 0194BCE073B606229B71CE5300FB5919DE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: W8wOpaU2aI/dg/a+maXsfISXROS5cv0+qn3pxgEv5D0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:b6:06:22:9b:71:ce:53:00:fb:59:19:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=0ab34bdb11d12c38f417324c23a5f0d1b8fa601b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:ac:48:b1:e1:84:ad:d9:cc:6b:94:21:e9:
d7:34:c6:2e:7d:d3:a9:d4:eb:9b:3b:46:ea:00:eb:
40:e3:2a:d4:32:3b:d1:78:bb:22:5c:d6:c3:4c:1d:
5e:be:c6:06:52:c2:35:29:a5:dc:47:bb:05:0c:7b:
f4:0b:34:e1:8f:6c:9c:57:dd:2b:f5:6a:d3:e7:22:
2f:49:cb:75:99:39:92:85:ae:55:8d:f6:cd:71:84:
38:5f:8a:cf:96:6e:26:e8:3a:08:7c:22:4e:ca:92:
6d:8c:f2:9e:a4:94:46:42:d4:34:ec:a8:2a:7a:28:
1f:9f:ba:2d:06:d4:a0:b0:65:91:54:dc:97:89:36:
ef:39:b5:38:83:e6:74:87:63:6d:59:26:33:4c:15:
b0:c7:06:35:53:c2:42:d5:05:58:8a:f3:fa:c0:0a:
46:63:b5:ae:3a:a3:71:d4:ce:97:58:39:dd:35:e3:
3e:2e:84:1e:25:cf:45:2b:3b:81:db:70:0b:28:c6:
66:44:94:f9:8a:a3:22:a9:1e:7e:90:7d:c3:e6:2b:
5d:7a:57:17:be:fb:a4:be:2b:6b:ae:43:99:7a:2a:
9d:f8:1c:f4:a9:59:35:8b:30:3d:06:1c:96:b1:63:
24:80:18:c1:52:6e:49:87:82:a7:0d:29:e3:08:aa:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:4B:DB:11:D1:2C:38:F4:17:32:4C:23:A5:F0:D1:B8:FA:60:1B
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:89:94:03:54:f7:ab:de:0b:56:e4:fc:28:0e:05:1d:37:f1:
59:44:98:7b:d0:a8:72:4f:63:43:75:9c:f6:09:64:8d:ee:6e:
55:ee:e2:5f:d6:06:1e:62:0b:07:41:86:15:8e:28:fd:5b:e6:
bb:89:3e:86:8c:cb:fc:53:06:96:2a:17:27:f4:70:f7:9d:c8:
0a:c1:4c:73:8f:77:61:32:f6:d3:d4:a1:07:c2:a4:9f:0d:6e:
d8:6a:22:1d:7c:ba:5f:85:ef:8e:27:14:d8:43:6d:7c:c4:89:
4f:9b:48:72:c7:fc:6e:98:00:9a:c2:9b:81:4a:af:27:c8:9d:
4d:34:d9:9f:da:7f:f8:37:7e:bb:82:1e:7c:a5:4c:bb:2c:78:
dd:3a:42:23:79:24:66:8f:f3:63:d9:ef:c0:82:e2:28:90:98:
54:b8:f5:fc:9e:64:fe:32:f0:b6:8d:f9:23:83:be:ac:37:5a:
70:49:ed:c9:f5:06:ce:5a:90:a7:29:ca:ae:7a:10:a2:03:f9:
ba:15:f8:29:1b:ae:ab:08:37:59:de:9c:70:14:75:17:9d:7c:
6d:a5:05:0d:ea:77:3a:2b:23:69:b8:8b:54:3e:21:e6:ac:c9:
f1:54:91:5b:ff:e0:f0:e9:46:72:b9:48:7a:93:20:21:4b:62:
c6:d0:e9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:46 2025 by rpki-client