Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: nnFwdZM/R8K+FMvTcodO8DF3V4dddxfqprAWQBAxsAs=
Subject key identifier: E3:B6:93:D2:15:4B:CC:94:5E:8B:AE:55:2A:68:FF:06:F7:48:30:5F
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 0194BC3BED6CD05411414B0745FF79D34426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: rBJpXQ4rDbkclE7zv3F04I3Qv9uMlAnaxad9gEE9SPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:6c:d0:54:11:41:4b:07:45:ff:79:d3:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=e3b693d2154bcc945e8bae552a68ff06f748305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:1d:45:5f:99:3c:d2:fe:11:28:81:08:80:
07:47:55:5f:e4:1b:7a:70:2a:38:7c:31:7b:03:35:
9e:1a:1d:fe:60:bf:89:4a:ca:70:17:ab:b9:04:f1:
2b:46:5f:1a:06:e4:c9:db:cb:80:e8:20:1f:bf:ef:
23:ef:17:93:b1:ce:cf:7b:6f:5f:2c:4c:fc:82:36:
6b:ee:89:c7:92:91:16:dc:8b:49:8a:af:ab:bd:f2:
6a:19:8d:5e:fc:19:43:4c:5c:2b:c9:e4:49:17:4c:
2c:ad:c5:8c:3b:23:72:56:7b:c8:fd:58:84:6f:bc:
1d:97:f1:e8:ab:52:ac:e3:96:3e:ad:fa:48:5c:7d:
cb:3b:67:53:e8:a7:e9:52:60:6d:0e:17:81:f2:33:
c0:1a:7b:b6:95:4e:10:af:fa:a4:9a:11:93:cd:3c:
24:66:30:be:c0:89:f2:a1:0a:ee:8b:c2:a6:74:29:
76:5e:ca:36:c7:cf:c8:db:c7:11:1b:9f:6b:47:06:
1a:d4:bf:2e:e3:1e:2c:28:ca:a9:65:a0:90:d9:bb:
4e:a8:85:d4:79:7a:aa:2b:da:31:03:6d:cd:db:cd:
cf:d8:2c:d9:b3:f4:e2:49:f3:35:15:1b:a5:e7:8b:
0a:ed:ef:54:11:8f:0b:d7:5f:b7:a1:94:f8:d6:a3:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:93:D2:15:4B:CC:94:5E:8B:AE:55:2A:68:FF:06:F7:48:30:5F
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:85:3d:9c:9c:3f:62:f2:d4:fb:77:be:b3:28:5d:ae:76:a2:
24:af:7c:44:cf:19:66:e8:48:ca:46:ca:f4:97:6c:74:c5:26:
7c:4c:c2:cb:d8:dc:f7:1b:c0:c2:51:bf:1e:c3:35:a7:b9:1e:
43:b4:dd:34:f3:9d:34:a5:fe:e7:1b:85:52:82:bc:c5:53:2f:
8f:04:da:98:54:6d:71:7e:a0:16:91:5b:84:ff:75:79:1c:95:
01:ee:db:a3:39:11:42:28:b2:55:86:20:fa:0a:d8:25:3b:79:
e2:74:68:77:8a:dd:aa:d9:98:89:f2:de:86:ae:34:e8:a1:71:
ac:f5:9b:5b:9e:f2:68:62:27:ca:0b:3a:ad:69:e2:13:59:d7:
4f:f4:4d:bd:bf:35:c8:09:73:59:19:53:1e:87:80:f5:90:5a:
b0:d3:7f:3c:80:05:a0:53:8c:00:64:83:25:19:03:27:40:65:
e7:9b:8d:46:62:2c:f4:39:b2:88:c5:63:ae:bc:dc:d3:4c:f9:
fa:9c:d6:30:5a:4e:dd:e7:fd:18:12:5c:ed:4a:25:45:0c:4b:
3a:46:fa:87:a7:9f:66:c8:56:7e:26:77:86:26:e5:69:b9:c6:
89:9a:ea:b2:5f:2f:b9:d7:09:74:bf:d1:07:ce:c9:29:00:9a:
a3:29:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:02 2025 by rpki-client