Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: VSIG7+o99rFjDBbJP2O6Z2sBjBloiPxyMRY4yrkuP1I=
Subject key identifier: 2D:3A:38:35:45:4E:EA:8B:04:5B:0A:CE:50:1D:07:96:2C:5E:32:2A
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 0194BCE05BE9AF58B82C958E05008EA2FBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: 27fsmJYFLQIfa09ObFhS4XHFA2J+95pC+bYlDdhLbyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5b:e9:af:58:b8:2c:95:8e:05:00:8e:a2:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=2d3a3835454eea8b045b0ace501d07962c5e322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:c2:9f:55:14:55:55:d8:67:3b:1c:48:52:
88:81:59:a8:96:75:97:90:9b:e4:4e:c2:3b:db:fe:
71:17:87:a9:95:94:d4:4b:d7:86:a1:4c:88:53:ea:
04:86:97:a4:05:7c:b6:8a:e0:06:f1:25:c5:05:ee:
ec:c9:35:57:b9:ac:a7:d6:3f:58:d1:06:0f:d1:fd:
2c:cc:5f:18:9b:b2:b5:f4:7b:02:3c:60:c5:09:06:
40:b9:39:8f:1c:e5:eb:b8:5b:46:c3:93:90:79:cd:
ec:98:49:a8:cb:61:74:c1:8d:51:75:ec:d9:b1:25:
f5:09:a8:56:86:f5:de:af:7c:bf:d2:54:f8:fc:fe:
08:23:73:fb:db:61:2f:a2:1b:31:b0:ab:5e:ee:46:
bb:42:f3:0c:89:42:43:25:99:57:f7:28:ac:ba:16:
34:d8:63:30:84:fe:09:54:54:5f:83:73:5a:7d:6b:
67:56:b7:70:25:5b:9c:a2:bf:7a:2b:23:9b:cc:0b:
dd:e1:50:3b:a0:fd:a7:73:20:62:22:27:e0:93:99:
1d:2d:95:ce:5c:5a:b3:c2:35:df:f1:16:d6:d3:59:
be:e4:4d:81:9a:9d:52:b7:b3:bd:81:1a:57:c0:0b:
10:ee:9b:98:9d:f8:fb:6f:77:55:36:19:39:75:d6:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:38:35:45:4E:EA:8B:04:5B:0A:CE:50:1D:07:96:2C:5E:32:2A
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:fe:18:5c:a8:6f:bf:87:9c:f2:5f:92:8d:d9:be:27:6e:
06:de:28:dd:ca:be:a5:11:16:c8:99:a1:07:99:25:52:98:bb:
4b:87:a6:9b:eb:3c:06:59:0c:b7:5d:6e:98:c2:85:c1:f2:32:
32:3c:bc:f9:56:59:65:da:b5:6d:58:bc:06:70:fb:66:dc:2a:
0d:6c:f9:1e:fd:3e:50:71:78:dc:69:f7:d3:57:a0:6d:e8:3a:
bb:0d:4e:9f:5a:3c:3d:77:60:7b:79:05:b9:82:8f:7b:3d:27:
59:54:97:59:d9:7f:4b:ca:42:c8:ce:bf:52:ec:bd:cf:01:1b:
e3:fa:bc:b0:f4:58:e8:87:ad:30:95:ff:77:3a:07:fd:a2:87:
73:e7:26:b4:08:5d:66:c9:ab:0b:3f:18:d1:f0:eb:c5:43:20:
7f:71:93:19:25:6d:12:ec:9f:e9:b4:01:8b:9d:e0:f4:be:df:
5a:e2:87:85:00:56:3e:25:27:79:e8:7a:39:3c:5f:f6:e6:19:
50:98:cd:f1:19:5a:d7:c5:c7:cf:45:1a:10:6f:d2:90:94:90:
46:a7:d8:f4:07:9b:39:1d:a2:86:38:89:b9:59:3f:99:8b:34:
f0:8c:e0:7a:db:5b:51:81:33:94:a5:ad:17:31:3d:9b:f5:ea:
5a:89:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:00 2025 by rpki-client