Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: adiCH/ZXKnHW7DNYmVhOjbILTQI21k4nFJQhSRx7Esc=
Subject key identifier: C0:03:F1:AD:DE:16:D2:67:2E:2D:E4:38:5C:74:74:1E:4E:6A:23:8C
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 0194BD17F97E190C5AB19113041691C51970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0D3F
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: P14JxvRL8yEqp7MswGzflf70LD3kPmeJHeY7eVJOB98=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:7e:19:0c:5a:b1:91:13:04:16:91:c5:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=c003f1adde16d2672e2de4385c74741e4e6a238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:7c:7e:82:31:1d:46:d3:f7:92:ff:33:35:
ee:21:79:b5:84:b9:aa:c6:42:4c:7f:d5:28:68:c1:
de:26:01:e1:f6:9a:98:5c:ee:a2:6b:10:e2:c2:eb:
3f:6c:f8:6d:c8:b8:de:41:89:e7:85:4b:18:62:4a:
72:09:e2:13:f3:09:aa:3d:73:2c:6d:78:21:73:a8:
d2:3f:67:f6:c5:70:65:84:ea:78:cd:0c:c4:03:c3:
bc:a1:27:5f:7c:9e:c9:e4:69:ac:dd:82:a7:38:6a:
8c:60:e1:c0:dc:cf:09:16:11:4e:3c:43:91:85:ff:
ac:25:c7:fb:d3:64:b8:94:81:06:72:f3:cf:09:98:
72:1c:ec:2c:f1:d2:08:51:98:2b:9c:60:c0:b1:d8:
88:a6:b3:19:1b:2f:e9:5a:f8:03:28:b2:e4:0d:12:
eb:41:eb:37:c5:be:ca:0e:58:6d:c6:ea:05:7f:a0:
10:90:a0:b3:d1:c0:4e:40:de:1c:45:7b:97:41:49:
cc:8b:9b:b1:51:22:54:cc:f3:f1:df:39:57:25:40:
9b:60:8a:25:5b:6a:ac:fd:cc:40:a1:b4:b0:e2:79:
b5:40:bd:90:10:44:5c:cd:a1:e9:67:b7:9b:12:d4:
78:ad:15:b3:a7:34:e5:3b:2d:bf:34:ba:bc:d8:cd:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:03:F1:AD:DE:16:D2:67:2E:2D:E4:38:5C:74:74:1E:4E:6A:23:8C
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:87:70:f9:ac:f5:75:22:3a:4a:97:4f:ed:2e:14:b5:b9:90:
f3:99:3d:c8:1b:2a:fe:52:9a:9c:71:fd:1c:47:99:9d:0d:f1:
3f:a9:12:a6:f9:6a:64:50:92:ea:5a:fc:ab:e1:b6:8c:e7:5a:
16:48:9d:7c:fd:24:07:c3:13:fd:48:a2:a0:77:aa:55:31:b7:
5d:d4:b0:4d:a0:9a:23:b7:dd:8f:cd:60:22:70:e4:dd:c6:25:
5d:55:c3:1d:e7:75:fc:e9:92:8d:c9:d5:f4:6a:6e:96:9b:ef:
02:4f:ba:e1:37:86:2f:de:f3:bb:54:8b:a1:2d:a2:7c:79:b7:
a3:90:64:f3:5e:26:d1:a2:b4:c6:22:25:4d:e9:f1:59:58:cc:
64:7e:8d:fc:86:e3:f7:43:60:3f:2a:4d:3f:87:ab:24:86:73:
99:70:be:59:69:61:f2:0e:03:cd:8d:a2:e3:ac:df:d3:06:9a:
2b:87:49:a6:63:93:8e:73:22:4b:07:ee:cc:39:d0:93:e9:cf:
71:2c:00:64:f6:5f:c3:ea:af:12:d0:8a:78:08:a4:31:93:19:
d4:21:96:62:56:f4:bb:2d:57:df:65:51:b2:1e:46:da:2b:8d:
17:09:b1:74:6d:52:e6:8f:b6:c2:53:f8:1f:7f:3b:2b:6e:04:
e4:83:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:46 2025 by rpki-client