Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: IySJxTDAaTcztjTEsW6cqxM+28xtDB0tOgkZ0+a/v7E=
Subject key identifier: E7:43:71:C0:CA:50:F0:88:DB:20:7D:15:EB:FC:C7:B7:69:D9:15:2C
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 0194BD17FB5E0FE3F931E5F400222DCFC408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0C8C
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: Qk/8xatfCTMtw50eaJUUxMFOPTrYPzXoXJelRe3Nz9E=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fb:5e:0f:e3:f9:31:e5:f4:00:22:2d:cf:c4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=e74371c0ca50f088db207d15ebfcc7b769d9152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:95:c0:1a:08:5b:a7:dd:fb:72:f5:af:87:
cc:82:80:92:f9:25:d1:42:e2:b5:3a:85:83:f5:42:
f3:6b:1a:d7:2f:ad:e6:be:9d:03:f7:30:ed:c8:25:
69:75:c7:85:6b:b3:ec:3f:81:df:8c:1d:7a:d7:ff:
f1:f0:3a:28:ed:ad:70:a4:eb:96:3c:ab:4e:dc:ea:
bc:5d:da:e4:d6:08:e1:ed:44:39:c4:0b:a5:2b:48:
60:e9:49:d6:df:e5:c3:02:37:bf:6f:4e:93:ed:aa:
4e:43:55:1e:52:25:ea:db:2a:99:b0:81:2c:82:51:
2c:06:d7:6f:89:7e:8c:af:c4:83:ee:31:15:52:5b:
65:10:38:5d:ed:98:b2:0c:92:39:ef:dd:d8:c8:b1:
32:1f:97:b0:ca:fa:ec:25:09:ea:1a:2a:ab:ee:fe:
e1:d6:98:8f:3b:17:b0:20:94:72:a2:92:d0:1b:c3:
d6:41:8f:59:13:f4:0b:f2:d5:0a:57:5d:fb:de:7f:
d4:30:6e:06:f3:8b:ae:94:22:b7:ef:d9:ee:43:a1:
60:16:a5:09:5d:6b:99:25:cc:b6:f0:02:a1:c2:e6:
e8:d2:52:7d:0a:79:5c:99:e8:dc:69:91:77:11:8b:
86:5e:03:45:50:f0:98:e0:1f:c9:82:39:4e:56:eb:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:71:C0:CA:50:F0:88:DB:20:7D:15:EB:FC:C7:B7:69:D9:15:2C
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:b5:f6:80:11:7b:33:73:16:25:de:f1:74:16:b4:3b:42:
2c:31:c0:d7:cb:df:72:99:3e:d6:b8:aa:1d:d0:a1:01:f9:4a:
4a:f1:96:28:ab:79:22:29:b8:2d:22:21:47:b2:59:7b:b5:08:
50:89:fb:eb:a4:ac:e5:ef:ad:ff:ce:09:58:3f:d6:42:88:2e:
36:d6:64:e0:21:de:e5:92:90:13:0a:b7:a8:f1:ca:d4:07:14:
6f:5e:c1:1b:78:f9:e5:e6:62:7e:ea:4c:6c:dc:1b:30:7b:86:
ac:85:42:0a:41:f6:8b:96:0b:c4:ff:4a:52:3a:f8:1f:d3:5f:
45:d9:59:9f:aa:8b:cf:b0:6b:be:7f:73:0b:91:6f:dd:6b:f1:
3d:cd:9a:d8:0f:b4:42:10:09:a1:c4:96:a0:e6:dd:13:3c:ce:
2a:38:64:c9:70:b0:c9:66:c9:44:8c:d5:48:78:e3:dc:5e:9a:
18:40:92:e8:a4:2e:b2:6b:5f:ec:fe:27:27:5d:ff:c0:72:18:
99:57:a9:b6:76:32:c4:1c:45:4e:67:8f:c7:84:b4:29:00:34:
e2:c2:d1:5c:f4:49:26:fb:0c:bb:0e:be:6d:ee:39:21:bc:47:
f8:df:5b:5b:2b:7a:db:15:3b:93:12:cb:e6:bb:ff:af:4f:8e:
fc:58:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:22 2025 by rpki-client