Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json)
Hash identifier: QmOjNLusRrSWwBwty4As/T0LeQEjAv7ZATE6v8f8dxc=
Subject key identifier: 16:45:A7:44:F3:69:DF:C0:F7:EC:4B:B4:AF:F1:27:9A:1D:A2:5A:AD
Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Certificate serial: 0194BBCE5429E624741406B1DFC2E0F431B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
Manifest number: 0C19
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: SR5KRivZqqoCmpk9IKso4+bEmjQQppB5ZKYDFCkH2Ko=)
2: BN10iJQINkqqQbCXE2ZsJo5PDg0.roa (hash: dLiu8pKhhmUdKMIv3bdjJ619GvxkAvZ9+W0bGvQ4ymQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:54:29:e6:24:74:14:06:b1:df:c2:e0:f4:31:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=1645a744f369dfc0f7ec4bb4aff1279a1da25aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:43:93:0b:5e:b1:9c:80:88:96:c1:52:64:
16:cd:51:5d:99:fd:1b:4f:05:5a:23:0c:ea:6b:94:
a7:36:62:67:cb:fd:eb:8b:3c:89:4a:ce:55:57:5f:
e3:7b:f0:21:13:40:16:9d:06:61:67:1e:9f:be:82:
dd:2f:b4:4f:e9:ce:84:f7:23:1f:e5:90:9d:87:89:
f3:36:d1:59:1b:48:25:35:e8:ff:fd:2b:fd:96:9f:
35:38:50:aa:a8:a6:02:30:92:0d:9a:f0:6a:7a:32:
be:a0:fe:bb:de:b3:10:7c:e3:64:19:f4:d4:44:f2:
a5:6c:6b:80:12:17:8a:0e:cb:ab:a1:cb:c0:b3:00:
63:91:d0:de:93:c7:cb:7b:17:57:83:ec:34:cb:34:
e3:04:46:c3:7f:7f:fd:86:1c:c9:16:bd:b3:87:70:
71:43:6b:1e:86:eb:23:2e:3e:dd:83:97:b8:88:e2:
bb:51:b5:60:43:30:72:e2:09:8f:73:c7:eb:61:dc:
cb:6b:51:61:92:93:69:cc:44:c5:3a:4d:96:88:94:
ac:4d:35:08:b0:93:db:d9:03:34:94:da:a6:d0:42:
27:a2:fa:be:34:f4:62:c9:fa:15:ed:be:ca:26:49:
77:7d:ad:e3:cd:6f:5c:42:18:7c:22:47:dd:73:a4:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:A7:44:F3:69:DF:C0:F7:EC:4B:B4:AF:F1:27:9A:1D:A2:5A:AD
X509v3 Authority Key Identifier:
keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:24:28:65:44:21:a1:16:7b:b0:f7:f8:36:90:bb:38:82:
ff:ce:9c:64:d0:a7:cb:4c:c9:87:78:a9:a5:0f:66:1c:61:a2:
00:e5:a6:d5:9d:1e:8d:6e:d5:68:f7:6e:20:cf:ec:0d:b4:7b:
54:93:27:68:a4:4e:15:a3:e2:a8:d3:8e:0e:e6:38:f9:84:1b:
f0:5a:d6:31:21:c9:c4:83:4b:62:2e:70:ed:f6:b2:35:80:0a:
06:00:fd:41:2f:99:c1:6c:d1:e2:34:ec:65:3f:76:ae:68:a6:
9c:19:c0:93:a7:25:53:6c:00:59:8e:3b:a6:58:ac:93:37:ed:
fd:96:14:7d:e9:5a:8b:fb:c2:54:1d:74:69:d1:bf:6d:27:46:
06:71:34:99:5b:a7:9f:c5:90:ba:69:e9:b7:ff:c9:d8:c0:a1:
ab:4e:11:28:82:ee:2b:3d:6e:d4:ce:84:04:cc:1e:76:81:8c:
5a:8f:a6:07:cd:c0:5f:cb:95:15:31:41:fc:14:34:67:cf:a9:
31:67:6f:0b:88:dc:4e:e3:80:92:87:c7:b5:4e:a4:51:d2:57:
73:24:e2:51:43:30:9f:d3:83:41:13:34:5d:c5:8b:ab:fe:c7:
3e:98:00:85:00:e5:fb:74:fb:8e:32:87:f1:08:a7:e1:e2:3d:
5a:4f:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:31 2025 by rpki-client