Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: XMjnOssDxD1mbNZJSdPEioPp1ydNZmMx0J76L9KZxyI=
Subject key identifier: 8D:05:B1:06:45:F5:5E:C1:62:2A:72:95:E5:D3:EC:D8:BD:EB:05:AF
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 0194BBCDFAF4A5CD362D91615742FBF70CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 0FAA
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: MhsvGInZh4oRmeqr9hsx5oB1eaOI4oEGKCv4Nhv0nco=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:f4:a5:cd:36:2d:91:61:57:42:fb:f7:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=8d05b10645f55ec1622a7295e5d3ecd8bdeb05af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:cc:54:3c:e1:9a:1f:76:ee:e0:7b:37:a3:
b7:9b:30:bc:90:e8:ee:94:d8:82:34:2d:b4:6d:36:
53:98:c8:98:57:6b:fe:e3:07:b7:aa:cb:ba:3c:3a:
80:e8:95:a8:e0:6c:c7:8f:d4:0f:81:f6:88:ca:77:
84:f2:9e:10:99:60:98:3d:16:52:dd:bf:0c:e9:83:
08:54:bc:3c:13:f9:61:57:57:bb:9b:96:cd:ad:c9:
28:29:fb:f0:f3:26:82:ed:32:48:1b:be:a5:25:60:
85:31:58:92:48:36:e9:4f:9b:76:39:d2:25:ea:07:
73:fc:fa:14:e2:a6:2f:b9:5f:e4:84:d0:5b:f2:41:
49:0b:4a:e7:00:7c:b8:73:db:95:6a:a9:ae:e2:d9:
e6:50:df:62:71:79:5f:69:b4:8e:c1:81:c0:e9:96:
cf:ca:49:54:ca:ec:11:d8:87:95:44:fd:5c:b9:2f:
f7:7d:57:c0:46:8a:76:3f:58:a8:c4:5a:93:c5:0f:
98:26:1b:34:11:3d:11:7d:ff:52:be:d7:38:82:30:
3b:7d:86:dd:60:dc:7c:5c:74:de:a0:03:0a:4a:6c:
47:2e:d3:e8:26:af:7d:c7:44:3a:53:1c:e1:a7:9f:
5a:26:db:af:f9:a6:8d:e4:25:23:ae:ad:0c:ed:c0:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:B1:06:45:F5:5E:C1:62:2A:72:95:E5:D3:EC:D8:BD:EB:05:AF
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:48:38:cc:96:c0:d2:1c:6a:2b:b1:36:d5:0c:6e:05:1a:
4d:ac:ba:8e:14:0e:3c:ee:4f:eb:72:aa:ff:6b:40:e8:0c:8c:
69:0c:cc:bc:c4:aa:e0:d3:ea:92:68:c1:71:f5:f3:37:0d:35:
0e:c3:75:20:9f:86:de:0d:6c:ba:2e:15:73:2d:e4:4d:79:9d:
cc:39:1f:f6:8b:c9:33:0e:10:6a:b7:2c:f4:b7:4c:20:7e:d1:
25:04:74:79:71:1f:c2:fa:9e:a8:7f:62:2f:df:a0:3e:78:fe:
6b:d7:45:df:84:32:82:1c:3d:60:b4:a1:36:fc:ae:56:30:2d:
2b:be:91:42:05:69:5c:25:a9:41:90:19:14:57:e8:4e:59:2f:
bb:a7:66:d0:ca:a9:e6:ab:c1:6e:ee:03:cc:f4:d4:55:b6:3b:
30:a6:23:68:d7:3f:a0:27:77:a2:7f:ff:45:9f:b8:0c:3a:b7:
60:e8:95:ac:fc:5d:56:9c:a0:55:07:14:d3:be:b2:36:5e:d8:
0d:66:ed:16:5c:d0:f5:94:06:d4:82:ad:4f:3f:aa:78:54:09:
8a:fa:0e:7d:ed:e7:19:b7:bd:f4:f4:38:7d:71:e7:d0:fb:da:
18:70:73:89:7d:4b:58:d3:c4:19:85:97:bd:35:1b:0d:b8:49:
50:b3:c3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:20 2025 by rpki-client