Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File: B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier: ADiWHRKzdXDnrmQ3n3PPf8cdQFv08FUTmAnk9yrlV60=
Subject key identifier: C2:0F:56:EF:50:D0:80:C7:84:98:44:72:3B:1A:D8:B0:4E:67:C3:5F
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial: 0194BC051EB994954D8013D22288136D905F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number: 0817
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: pnfoVCce7JvcDmglMbDhRnM+97Hx7hs7C8XI4CMG89U=)
2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1e:b9:94:95:4d:80:13:d2:22:88:13:6d:90:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=c20f56ef50d080c7849844723b1ad8b04e67c35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:ef:d6:bc:65:c1:d9:77:de:b2:29:e4:90:
6a:a8:bb:8c:de:62:be:cc:a3:fa:77:9e:d9:50:f7:
e7:18:32:ac:23:37:eb:00:e8:cc:81:67:dc:b9:19:
19:98:2b:29:7b:c2:ff:75:7a:3a:f6:f7:ca:9a:c0:
c0:6e:e0:8d:a8:18:d4:cd:9a:81:7a:1c:22:43:6b:
21:ed:4b:9b:40:b7:d6:4f:9f:c5:d3:fe:5b:63:ed:
3f:d3:d2:b6:c8:46:73:dd:61:cf:8b:39:e1:ee:78:
be:49:a6:84:54:9a:9d:45:37:71:bb:18:40:95:e8:
7f:8d:e9:c2:5f:8f:86:d4:c0:9b:1b:19:07:0f:24:
e0:4c:32:ff:c4:35:85:0c:b0:3f:f6:34:dc:96:31:
f2:50:93:6b:04:4b:09:c5:2a:b5:80:7f:b7:52:06:
70:cc:32:42:59:9a:53:0f:e2:82:1f:ad:1b:59:06:
f2:8e:ef:a6:e0:44:82:4e:7c:26:d5:db:8c:a7:31:
9b:02:dc:d6:f0:65:92:bf:40:bd:0b:e3:40:be:41:
53:3a:ce:00:f1:82:71:fc:cd:f5:4f:50:19:d9:84:
47:6e:59:15:21:51:67:8d:4c:1b:c4:0c:ad:7a:70:
7c:42:e7:67:ef:3a:3f:72:14:42:c0:b8:07:b4:4b:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0F:56:EF:50:D0:80:C7:84:98:44:72:3B:1A:D8:B0:4E:67:C3:5F
X509v3 Authority Key Identifier:
keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b0:99:ef:8f:2e:ea:7f:87:cb:83:8b:94:50:6b:c2:95:a0:
c3:e1:2e:8c:a0:b3:bd:90:5c:bc:19:fd:65:1b:6b:00:f7:68:
a1:c9:53:e6:d7:e9:6c:2d:d9:f7:6b:f2:c6:e6:a0:df:4c:f7:
02:53:6f:8f:0c:b0:f0:07:61:77:31:30:72:b5:b5:35:fd:ce:
b8:4e:8f:69:92:01:f5:91:1f:c1:70:2b:64:a2:e5:d9:17:75:
d8:5d:c9:aa:5d:74:fa:bc:6a:90:99:5e:42:46:90:08:04:2a:
a9:a2:a2:5d:1b:12:a7:2a:64:f6:8b:e8:f6:52:74:b2:be:6e:
f2:7a:47:60:40:0f:40:9c:a0:5e:0a:68:95:b0:77:72:1a:7c:
c5:46:18:4a:44:81:8b:49:c6:94:ee:92:6e:0e:a8:89:e4:ac:
5b:a8:02:61:14:46:5c:70:94:60:50:14:4c:5a:04:57:09:17:
57:88:00:16:e7:c8:57:99:76:9c:06:12:47:61:3a:8f:b0:1b:
5f:97:50:cb:69:de:b1:23:91:13:db:60:41:a7:21:bf:b6:dd:
18:1b:e4:ca:d0:39:2b:57:85:3e:d3:f5:1e:c2:7f:0c:bc:47:
d4:f1:6a:ac:20:cd:9b:d6:fd:07:cc:02:b4:4e:99:15:cc:51:
cc:ac:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:11 2025 by rpki-client