Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: w4Hlvh+I0MZTp5AGlmFj6GOeLD6vI6Zm3zEOTVamJh0=
Subject key identifier: 0E:D6:3A:35:37:EE:B9:43:22:4C:2A:F1:0F:43:E4:E3:96:BC:E4:2F
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 0194BC3C5982D4805AC33D1510B5820D73A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 04CC
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=)
2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=)
3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=)
4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: 4Y04fCkp/OVksAhQxxSVuf7P7VzOzUsqfKx32MU3YHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:82:d4:80:5a:c3:3d:15:10:b5:82:0d:73:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=0ed63a3537eeb943224c2af10f43e4e396bce42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:8f:ce:2c:b0:af:3d:a9:e8:22:7e:09:a0:
0b:e4:df:c6:62:e6:65:0b:5b:65:15:cc:9d:a4:59:
f9:1c:2e:aa:aa:09:f9:0f:73:12:a4:a3:d8:01:7f:
14:19:15:31:aa:fa:85:6d:95:6c:ee:7e:ad:3c:87:
b6:68:78:0f:3f:5d:f9:c3:c7:6e:61:52:99:8b:0d:
4b:32:ea:84:59:76:f1:9a:71:91:bd:37:03:f7:4c:
b6:e9:5a:ea:38:f9:07:a1:d5:e3:82:02:2f:9b:3e:
98:5a:8d:47:5c:3e:54:a1:c0:f5:26:58:a8:48:5b:
00:89:f6:d4:43:d7:02:0f:bb:d1:86:e5:56:9d:4b:
70:b0:20:14:20:e9:57:50:bd:ef:51:aa:70:6c:9d:
fd:18:24:1f:26:4d:8e:a8:ae:5f:e8:b2:a0:ce:75:
6a:5d:19:e1:3d:29:50:95:e2:db:fc:bc:0a:fd:6f:
11:33:7c:80:d3:17:1a:0d:7b:7c:ab:bd:1c:11:a1:
e8:65:21:e4:62:19:7d:ad:6c:d9:35:d5:21:50:1a:
b0:67:be:ec:d8:97:7a:7c:1b:11:42:87:53:a6:12:
c8:3b:c4:76:ca:30:2c:75:c9:31:16:41:b3:46:22:
66:b4:4a:de:4e:a1:1f:a4:9b:9b:32:51:6a:82:ef:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D6:3A:35:37:EE:B9:43:22:4C:2A:F1:0F:43:E4:E3:96:BC:E4:2F
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:72:ea:14:60:dc:90:60:ff:af:61:83:f7:c1:91:04:84:
b1:63:f1:c7:2a:b9:7c:4c:2d:df:1d:60:3d:19:10:15:8a:c5:
30:bb:37:c1:c7:70:75:b6:22:0f:fd:a4:05:99:fd:15:38:fb:
a7:9a:3e:7c:28:f2:77:6d:3a:5a:cc:ab:f3:dd:25:32:f5:01:
81:3d:0f:6c:ef:14:f0:3b:85:e2:eb:65:3f:6b:f4:83:9b:dd:
c8:41:02:44:f3:97:13:11:51:df:7f:bb:ff:51:8d:f0:4c:0a:
67:d7:45:15:fe:e7:51:7f:28:01:99:fa:e0:7b:9c:21:37:70:
ba:84:a0:99:4a:7e:05:71:20:53:af:2b:d7:b9:c2:82:77:8e:
f3:4e:d4:74:a9:ea:73:da:24:7f:30:77:d4:48:2d:1c:47:c6:
11:23:eb:77:19:89:bf:6a:4d:71:87:d0:4c:f4:3e:a3:aa:37:
c6:05:a0:b7:cc:fe:ba:45:b9:65:d7:b7:3f:2e:da:79:81:b5:
4a:d2:69:5b:44:15:d0:b5:0c:25:c9:36:68:eb:50:49:ac:fe:
00:e9:a9:a5:75:cd:7d:e5:95:8b:6a:8d:ed:70:9e:5b:43:f2:
8e:e8:a0:af:03:e2:0a:9d:6f:6a:8f:5d:50:fd:46:3b:f7:17:
6e:4d:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:18 2025 by rpki-client