Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
File: 2OnkD_n7tigNo26XLyDTElAMGFw.mft (raw, json)
Hash identifier: 20tCbXZDTY7onS60E3XvUzXt/uWvDgGHAPaA0ekEK/g=
Subject key identifier: 5C:B2:A7:2F:98:B1:C4:B1:55:CA:53:24:91:16:D7:53:D0:E6:5A:21
Authority key identifier: D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
Certificate issuer: /CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Certificate serial: 0194BC04B432CD03CDB99987FD4AA90E1234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
Manifest number: 1112
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 2OnkD_n7tigNo26XLyDTElAMGFw.crl (hash: omW+EqVr+CllzUHUmc95HV3b9jCFOvfTq4Q8zCo9EIk=)
2: h5ibvBXljsm0_9K-AnuxEpyWzoI.roa (hash: SvGB7aqcdXdN/Cdk0NHyr1xHsC5MuHnt2HID1mkRiq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b4:32:cd:03:cd:b9:99:87:fd:4a:a9:0e:12:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8e9e40ff9fbb6280da36e972f20d312500c185c
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=5cb2a72f98b1c4b155ca53249116d753d0e65a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:f5:1d:07:66:06:f2:65:c9:64:41:0c:01:
23:1d:26:75:de:60:36:8a:22:16:25:83:cc:fa:0d:
37:a3:ce:38:50:95:9a:b9:12:9f:fa:95:4a:75:63:
59:bf:83:3b:f7:59:17:be:5a:3d:f5:8b:38:fc:ad:
a9:31:5e:6b:5b:b6:f7:73:7f:1a:dd:41:30:c9:e0:
36:ea:4e:a7:51:3d:6f:3b:ba:d1:e8:de:29:01:16:
0d:b9:cb:2c:3d:c7:12:72:ff:91:96:9e:1b:43:d0:
1b:bb:a8:4f:e0:28:b2:90:60:8a:65:c0:37:6c:df:
88:1f:87:47:a2:14:3d:72:4b:a9:db:19:21:bb:2d:
e7:1c:79:49:1e:bb:2c:3a:c6:89:14:f6:a4:5d:b0:
71:a5:bb:d3:88:b5:f3:06:a3:68:91:13:bf:79:38:
48:5f:77:29:75:8d:c1:3c:18:11:4d:44:d1:88:09:
11:22:6b:d9:5b:99:98:4b:34:73:a8:3a:0e:63:13:
ba:93:37:1c:07:be:3e:99:fe:b0:a1:10:3d:1c:ab:
84:33:16:1e:51:d7:8a:34:25:ed:78:ad:f6:0d:b7:
4a:d8:40:68:7f:7f:b2:20:86:54:5f:6e:2e:37:d2:
ba:fb:bf:29:64:f8:45:45:aa:c3:75:a2:e7:81:a9:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:A7:2F:98:B1:C4:B1:55:CA:53:24:91:16:D7:53:D0:E6:5A:21
X509v3 Authority Key Identifier:
keyid:D8:E9:E4:0F:F9:FB:B6:28:0D:A3:6E:97:2F:20:D3:12:50:0C:18:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OnkD_n7tigNo26XLyDTElAMGFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8738b9-2d0a-4ef6-afad-1ae506ea1760/1/2OnkD_n7tigNo26XLyDTElAMGFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:96:1c:47:5c:d2:6a:0d:ea:a2:f5:d0:67:d2:06:98:a4:f9:
86:c2:3e:dd:ca:85:a4:73:00:b6:10:04:40:ea:a5:7c:c6:75:
41:12:f0:1a:3b:95:07:48:84:08:ae:89:2d:e4:9c:61:08:50:
0e:81:e9:1f:84:0e:66:31:06:e2:cb:f3:31:33:55:09:f4:60:
78:91:b8:bf:03:a8:d9:71:8d:09:60:8a:7d:78:be:a8:fb:bf:
bc:61:d3:6e:9d:50:3f:68:e4:f9:63:ab:92:ec:d4:a7:59:f7:
20:24:a0:88:80:df:4f:c7:00:3a:79:89:9b:98:4c:76:df:b3:
10:00:8a:22:5b:59:8f:33:7d:a7:41:e9:66:29:c9:49:23:de:
ba:77:38:49:52:f4:50:81:3e:35:96:cf:0b:9b:bb:9c:95:b1:
40:db:2d:de:08:9e:8f:c0:95:71:b5:d6:52:12:4e:38:8c:37:
f7:0d:f7:7d:75:5b:b0:7f:4c:6f:d9:4e:d4:d2:3b:99:29:49:
b1:8d:47:c9:22:19:20:75:65:3a:08:b5:58:ae:7a:70:7a:8e:
22:d0:f2:09:33:48:ab:34:e1:13:6d:b5:c5:2d:c1:b6:49:b9:
dc:70:25:79:a0:89:82:2e:67:be:c1:cf:0e:38:4d:d8:da:e4:
16:5d:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:06 2025 by rpki-client