Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: IWJ/TY5FT2gnUnEFd2CVx5kTlhJzO2Z80PxvUkn0rrw=
Subject key identifier: D7:F5:06:84:F4:E1:72:25:A6:71:C1:1E:A2:5E:18:E1:88:03:28:62
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0194BC04DCE0DA2A516B3EBEC3FD7FA9DD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 08BD
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: U+nnt0vVCjr1NkvCJFmAttTmgJc8f4hjpS0+5tfyqi0=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:e0:da:2a:51:6b:3e:be:c3:fd:7f:a9:dd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=d7f50684f4e17225a671c11ea25e18e188032862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:7f:ff:35:db:f3:c4:c2:b4:7f:52:c1:d6:
c3:72:d4:5c:b3:d8:c2:70:8f:a2:29:7c:78:f7:16:
a3:17:d9:85:03:4b:37:4f:26:e0:a3:cb:cb:0a:c0:
ce:ce:91:33:a2:c3:5d:e4:39:63:7e:90:de:bd:88:
6c:2b:24:00:eb:53:59:4b:6d:bc:83:91:b4:cc:07:
16:18:06:d2:d1:a0:43:26:1f:61:5b:cf:36:90:61:
f0:bc:8d:65:9b:fa:8e:47:6f:ce:33:a4:64:ef:c6:
ec:e7:e8:76:ca:38:0a:d4:46:a3:f1:0b:63:e2:a0:
6d:96:ef:01:82:7d:84:9d:15:e0:60:39:99:2f:cc:
e5:8f:70:3e:69:bd:cb:e0:e7:19:5c:5f:82:78:ad:
61:1f:5c:7e:58:6a:c3:06:6d:34:89:c1:c6:59:ce:
c2:eb:d4:47:cb:78:33:07:95:89:49:ca:ae:13:41:
51:36:27:76:37:d1:0c:7d:e7:ae:c0:bb:a3:e5:bd:
54:b0:7b:fe:54:eb:88:c7:23:3e:db:32:2b:46:b1:
6c:c9:84:ec:a7:8a:13:7f:08:14:26:4f:3d:12:f0:
e8:97:12:ca:9b:01:02:3d:fc:48:92:02:43:df:eb:
a5:9e:cc:81:5b:12:01:c4:70:0f:ec:fd:21:15:f0:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:06:84:F4:E1:72:25:A6:71:C1:1E:A2:5E:18:E1:88:03:28:62
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:65:e0:96:6a:bb:bd:04:66:b5:53:60:ca:26:15:4d:ee:e9:
3a:f2:f0:b9:6c:1b:eb:b1:c9:47:28:c9:63:98:f0:46:79:38:
53:6e:68:97:38:57:4e:d4:84:42:a1:13:3b:fb:1d:28:7a:f4:
1a:5e:9b:62:fc:21:84:dc:d1:7a:bd:6f:69:83:92:18:75:1b:
c1:de:d5:e0:b3:e7:b7:17:c8:a5:72:f2:05:9d:89:9a:c4:d0:
33:6e:3d:2b:6e:7d:c5:aa:ba:07:35:f0:6e:fd:f8:16:07:10:
75:55:5c:62:b2:3e:c4:83:2e:61:f1:af:bd:f5:a7:e7:92:9a:
6d:c9:82:10:98:64:8d:21:13:cc:94:47:7c:d9:27:de:46:c8:
7c:c2:13:60:ac:6a:91:45:27:38:4a:52:33:36:5c:58:c5:81:
89:cc:56:8c:bf:9d:24:74:a9:c8:64:f3:95:79:e7:46:ec:21:
95:cd:98:03:ff:43:da:43:4b:71:ad:3c:1f:c3:00:bb:42:df:
94:44:17:71:d4:ba:ba:07:27:55:82:71:a8:53:3d:2e:9d:fb:
d2:6c:71:d7:1b:5d:4d:60:f2:91:c2:42:91:8b:d0:22:f7:8b:
1e:7d:bc:a6:e8:d8:9a:7c:7e:75:84:7f:5b:6a:12:93:1c:e1:
a4:41:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:01 2025 by rpki-client