Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: pF2KgiFiP1+gCs4TW9tXku0WmRTYrD4rz/+3LCsMTEw=
Subject key identifier: 9B:0F:46:E6:31:A1:0B:88:7F:C8:29:2B:BB:35:6C:E2:D4:E8:E6:5C
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 0194BD4E3FF19B9725C150BDFBF8F47C6024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: MuC/4z71Iu0+yFDGbZSduSi9jDl3ENyADH0hereN8ts=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3f:f1:9b:97:25:c1:50:bd:fb:f8:f4:7c:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=9b0f46e631a10b887fc8292bbb356ce2d4e8e65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:d4:cf:34:8d:54:31:67:eb:72:65:a2:e9:
e4:6b:63:ea:18:29:c2:94:28:41:c9:39:29:f0:5b:
c1:f3:9a:2d:b4:4b:e2:1a:82:dc:6a:ce:13:a6:71:
00:1e:8f:58:ad:a6:6d:24:91:89:19:23:d3:af:72:
c4:a4:11:fd:24:52:0d:fb:32:2c:11:73:e2:ab:b8:
02:08:4c:81:d7:0f:34:2a:ed:c5:17:f8:66:a0:24:
c9:6d:31:17:f4:03:73:69:15:19:92:41:0a:40:ee:
6a:67:5b:ec:24:15:00:cf:61:ef:86:56:ef:dc:34:
66:48:41:4a:bd:1c:61:21:09:96:ac:4a:54:3e:65:
21:54:25:45:d1:c1:c0:a3:28:4b:8f:5f:f3:b6:d6:
72:eb:b5:b7:e4:34:cc:be:57:c7:9a:e7:dd:8d:48:
80:6d:d6:6e:93:c1:d0:01:59:41:9e:bf:e8:aa:6d:
cb:2a:9d:84:6a:f6:cd:91:78:c4:57:e5:63:8b:57:
af:71:36:0d:8c:4f:a4:77:f7:33:e6:2b:d3:af:56:
f4:44:8b:32:0c:36:3d:bd:1c:4b:ef:4e:b7:9a:f5:
5b:d2:b7:d2:79:3c:b3:3d:21:4d:bb:63:ab:a1:bf:
8a:ff:02:f2:38:f4:40:d8:14:07:fb:49:6e:fc:7b:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0F:46:E6:31:A1:0B:88:7F:C8:29:2B:BB:35:6C:E2:D4:E8:E6:5C
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a0:76:f7:e4:d1:8c:a9:95:4c:56:2b:86:16:be:af:ff:d8:
0f:61:a0:75:e9:3d:e0:c0:8d:91:43:82:44:d4:ad:4a:a0:58:
56:a7:45:86:8d:0b:6f:07:27:bd:e1:18:49:40:77:65:b1:ee:
1c:9a:ca:f1:ff:bf:83:7a:86:1d:4b:0a:bb:48:d2:93:6d:4e:
a9:63:30:99:62:3e:8c:5f:26:c6:bf:ff:ef:fe:ef:e0:63:68:
7b:66:25:ec:d5:d7:a5:5f:15:d4:ff:f1:bb:e4:3f:3a:87:ec:
c9:a0:a4:dc:3c:50:97:89:af:20:8f:40:aa:75:83:79:a3:95:
c2:2b:16:d5:f0:fa:9a:6d:44:ef:1e:85:df:8c:42:64:be:9c:
93:f0:50:99:14:e0:db:57:1e:aa:90:d1:5d:cd:81:54:81:4b:
36:da:82:14:07:a1:dc:a8:f1:32:00:84:b1:83:1a:ef:ae:f1:
ab:97:b0:cf:c4:fd:cc:d1:40:1b:a4:57:11:42:db:99:34:dc:
df:ea:14:a1:b2:92:31:77:2c:5a:4a:1a:a3:c2:f7:49:b2:3b:
8e:9f:38:7b:68:1f:05:90:ec:c8:b7:56:76:4b:45:1f:24:b4:
d2:c0:ff:6d:a3:fb:1a:8f:76:68:5e:26:ab:18:f4:c7:c6:15:
43:21:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:05 2025 by rpki-client