Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: 3nxIwmmvIoAxeMz0YraY1WdWOzuwz80bGXcRK60Rzvo=
Subject key identifier: 7D:8F:D8:B3:D3:15:F1:F0:29:93:8F:AC:CB:67:58:7A:92:21:82:5A
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 0194BD856483E9844EDC94A140A9F45EF04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: 52o+OYaR6FcwmBOGCgt9WZ4t1lhFs5wsOHyzJbEU0mw=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:64:83:e9:84:4e:dc:94:a1:40:a9:f4:5e:f0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=7d8fd8b3d315f1f029938faccb67587a9221825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:e3:1f:42:ea:6c:6d:a7:13:29:20:cb:06:
d7:7f:f1:a7:7c:a2:a4:6a:57:5d:82:95:cd:de:16:
12:a3:a1:7e:dd:83:b0:62:d5:15:06:c0:55:5a:96:
28:a0:ac:f3:c3:e0:68:e7:bf:de:bd:b4:da:95:9f:
5f:21:88:14:ee:34:1f:ac:19:ed:fc:a1:06:26:67:
2e:c8:ed:76:18:95:92:32:d5:b8:06:dc:a5:53:df:
2b:d1:00:74:47:56:a9:ae:75:69:31:f7:75:53:45:
11:88:50:b0:aa:63:63:5c:19:29:cb:25:c7:ce:13:
46:de:7b:58:73:35:79:82:27:a2:e3:b4:9b:41:4b:
50:14:a5:5b:c6:e6:08:c8:04:76:c4:16:e5:29:1f:
80:aa:dc:cc:ad:62:9b:09:b0:69:5a:89:4d:30:89:
2d:bd:6f:26:71:ec:ff:95:51:7c:2c:9c:70:9d:b4:
ca:51:68:2d:cc:9b:47:2c:16:83:19:a7:ed:11:a3:
d3:b9:5e:67:1f:a3:4a:6b:70:25:07:7d:69:2b:ff:
3c:97:d3:f8:60:e3:f0:4a:c1:c6:3e:6f:24:62:ac:
c5:ad:f6:4c:89:bd:3b:07:7a:82:5f:aa:bb:6e:a5:
5f:a7:6e:f0:0d:2a:e3:60:03:d1:6f:ac:b9:64:a7:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:D8:B3:D3:15:F1:F0:29:93:8F:AC:CB:67:58:7A:92:21:82:5A
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:21:9b:82:2c:29:b3:ee:a1:48:17:ef:18:e5:3d:be:d2:8e:
58:85:b9:f6:60:29:11:37:cf:c0:35:26:07:62:10:de:69:92:
16:ca:37:d5:df:4e:bb:43:aa:d3:df:5c:40:8a:5a:52:64:df:
a4:c1:d9:91:15:db:e6:83:39:cd:9d:da:aa:a1:6d:91:36:cd:
8b:90:0b:ec:7a:a8:2e:8b:98:38:f9:e7:f8:19:c5:8a:93:86:
03:e9:49:7b:c3:6a:b2:a6:2f:fe:1d:4b:09:d5:5c:40:bb:9b:
c5:45:be:44:d5:76:2d:5d:ae:15:12:7b:9c:3d:38:e0:a7:97:
e2:80:f8:d7:76:cb:d3:79:79:a4:90:a9:b9:22:93:1e:65:42:
25:f8:5f:e7:e5:16:c9:62:a0:ab:8b:af:0f:ad:a1:95:d1:15:
a6:36:f2:6a:43:a6:70:60:9f:f4:66:16:e8:e3:4c:99:42:47:
18:b3:f1:7f:7c:13:f0:fc:a9:a2:42:7f:11:9c:05:bc:bc:83:
29:1e:32:24:49:b6:a6:8b:47:bf:4f:5e:3d:60:8d:3a:06:b9:
03:35:7c:7b:cf:00:f9:6b:63:9f:73:60:a3:81:ff:27:3d:9b:
08:1f:fe:d6:49:51:71:71:f5:8a:9e:99:ba:c6:e3:7a:d0:8f:
cf:b7:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:18 2025 by rpki-client