Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: gJ/lJVcsYenxNBgTjBdf/bOTxJzzdpwSNOtxL0N/yg8=
Subject key identifier: 6A:44:AE:A0:74:52:3E:B5:8C:FE:69:DE:4F:C5:EE:1E:0A:C6:B3:7A
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 0194BCE0A123A641E8CA75062AAC347CC1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 11DE
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: W2j/zmBie5cKMr/32RfGYrhllC0IW+AuVOd6oj4FEo4=)
2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:23:a6:41:e8:ca:75:06:2a:ac:34:7c:c1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=6a44aea074523eb58cfe69de4fc5ee1e0ac6b37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:2b:38:7b:a8:da:a9:41:ef:8d:16:7c:46:
7c:f5:a4:98:8e:d5:a3:01:7a:98:34:79:21:58:e9:
34:c9:63:ad:93:e5:63:79:8d:75:37:96:88:29:3d:
d1:c6:70:a0:f4:70:bb:d2:c3:37:87:61:e5:d4:cf:
34:3b:be:79:ae:f7:31:cd:e0:32:84:59:57:0b:e5:
69:e4:f4:eb:5b:e4:d2:de:d7:d0:28:50:4e:ce:e7:
e8:5e:96:14:94:88:e9:cd:2b:c8:53:00:01:60:85:
60:11:d7:79:3f:15:6f:3d:f6:31:a7:79:da:73:70:
68:9c:85:e5:68:5e:fb:70:d5:03:bd:ed:07:55:0d:
20:a1:5e:37:08:b6:79:9f:e9:42:5d:1a:03:69:8d:
6a:7f:2a:b2:95:1f:7b:2e:1d:fa:df:52:ca:35:f5:
99:f6:23:1f:69:e1:6a:17:14:ac:5d:4d:39:7e:7e:
4d:07:f5:74:8c:73:7e:e9:6e:b7:de:22:9e:d2:a3:
7f:a0:25:1a:3c:f9:36:4e:46:3e:1e:1f:0b:6f:5c:
8c:06:76:52:de:43:ae:c0:24:2a:1e:53:8e:3b:6f:
ef:a3:50:d1:34:d7:51:fb:98:ac:6f:a6:d2:92:72:
c9:81:de:03:6c:82:a9:39:48:cf:f5:41:a5:f0:d8:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:AE:A0:74:52:3E:B5:8C:FE:69:DE:4F:C5:EE:1E:0A:C6:B3:7A
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:b8:62:27:e8:52:f2:e4:73:1c:0b:4f:36:21:c8:5a:04:
39:97:3e:96:a6:af:7d:41:ad:23:00:c2:89:32:34:72:00:38:
fe:85:12:c4:3e:1f:47:9a:ea:41:0d:49:10:d4:8f:29:c3:55:
dc:ff:54:a7:94:1b:95:ed:42:0e:93:66:44:0e:88:9a:e3:82:
36:64:eb:de:60:15:06:a7:79:e9:2a:de:95:a4:72:ca:5a:b3:
b6:35:83:ec:ec:35:0e:0b:1b:e9:32:85:c2:80:b6:2a:b7:b7:
1c:d6:59:c3:e1:9d:39:f1:df:27:dc:5b:32:b9:d9:7e:13:e2:
31:60:b1:77:7e:46:a5:84:54:da:bc:44:95:39:fb:28:0b:0d:
16:c2:1d:54:ae:c6:e9:d4:23:40:a5:d9:e9:45:70:10:30:c1:
a9:76:01:bc:43:9c:91:b6:ec:67:c9:40:b2:8d:3e:2c:19:ba:
60:00:0b:d2:81:b5:48:58:c0:db:c2:85:4a:4e:7d:45:db:d9:
24:45:be:98:11:90:c3:6c:d6:37:37:38:5c:26:90:6e:22:90:
8c:06:94:4e:5b:f7:1c:10:35:20:84:8a:32:d1:a3:63:57:e3:
d6:d2:0a:87:fd:04:ee:a3:2b:85:bb:8d:02:f7:73:d9:f2:69:
ed:f7:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:25 2025 by rpki-client