Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: MmnxOxe99Ct0mSyvKPf3ZcE8MIUO+PfjtR+GR/KRYxI=
Subject key identifier: 02:39:F5:D6:47:01:36:D2:A1:7B:D5:D1:CF:40:F4:49:0E:41:C1:AB
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 0194BD178F9D4845C9C5B4576748FE672CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 01B3
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: 8W8Z6vxXUXWJdRYayE2bhTqIBYIeid17pfDitWKQW3o=)
2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:9d:48:45:c9:c5:b4:57:67:48:fe:67:2c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=0239f5d6470136d2a17bd5d1cf40f4490e41c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:cc:25:3d:65:2f:3b:52:f2:f2:fb:53:0a:
72:9d:f7:90:b0:ce:af:e2:b5:b6:06:75:a2:fe:d2:
f2:6a:3a:3d:9b:6b:1c:44:ce:cb:5b:1d:4d:18:85:
34:67:87:8d:fb:76:cc:93:00:32:a5:77:5c:b6:28:
29:cd:b6:57:43:d8:14:bb:1f:30:cb:15:f7:23:1b:
cb:44:09:41:c4:f0:38:24:ad:13:3e:7e:ae:66:5a:
f6:7b:f4:58:cc:2c:50:b9:90:0a:25:e0:ca:ad:57:
ba:00:d4:3b:fd:c1:e4:79:48:92:18:0a:c6:df:b4:
d3:71:1e:69:22:7b:54:78:7a:a1:f4:62:9b:94:4c:
d2:77:49:a9:89:3d:93:f4:93:49:eb:0d:8d:2a:15:
f7:57:ca:49:51:68:af:ad:bd:26:73:fb:e4:aa:57:
9f:b2:bc:fc:f7:19:59:ff:69:9e:39:be:6c:0a:21:
bc:5d:0c:8a:c8:33:9f:e7:d1:83:1c:12:ef:e6:d8:
32:a9:00:4d:65:28:56:fc:8d:d5:1b:7b:f4:ac:33:
df:2b:de:fd:6e:34:4e:78:cc:53:ab:fa:bb:39:04:
ed:9d:90:9f:ec:bf:31:51:21:47:27:b8:8e:64:7c:
8d:f8:73:d6:23:51:ad:56:c6:c5:fe:61:5f:2a:23:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:F5:D6:47:01:36:D2:A1:7B:D5:D1:CF:40:F4:49:0E:41:C1:AB
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:be:0d:dd:03:b0:7b:e9:79:a4:5f:a8:f6:67:82:4c:b2:61:
b5:20:b0:ae:b0:02:5b:e0:eb:d7:c6:ab:55:a1:c4:4b:d7:00:
af:01:fa:87:4c:5c:c5:96:5a:56:48:55:1f:42:41:65:20:ce:
9f:18:fd:af:75:95:61:1e:ba:95:3d:52:0c:81:37:ab:71:61:
1f:16:b1:52:82:21:67:8d:c4:d2:cc:48:c6:a2:9f:b8:f4:6b:
a9:39:f1:b8:f8:9d:7e:91:37:10:9f:49:81:b7:8e:74:db:7c:
ff:5c:eb:84:e6:20:b8:06:16:8b:45:ec:58:d5:82:fd:f8:d9:
50:d8:92:a1:98:57:a2:91:69:4e:a5:be:a3:a7:4f:65:fb:a6:
04:f6:1f:b9:30:d7:70:e3:da:52:e9:a9:60:19:ac:59:59:1a:
bd:5b:ed:24:a5:97:83:5d:41:26:86:db:db:ed:aa:3f:e1:5e:
c9:c1:33:89:83:50:ea:0e:98:65:6d:d4:1d:ba:f8:83:54:4a:
fd:ca:ff:98:30:4a:46:45:f5:ba:ef:a0:c7:53:16:c3:2b:e4:
eb:46:e0:ca:0a:97:00:8a:f0:52:f0:81:a0:34:a3:53:4c:c1:
a4:af:f8:30:44:63:cb:e1:60:09:ff:de:23:7a:24:9d:83:3b:
b7:e0:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:26 2025 by rpki-client