Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: SQzLTIOAGMxQvE0Qde+OvjVbn+dt90vFLYILFCUy9yM=
Subject key identifier: DC:7B:43:3D:34:C5:16:A7:43:6D:BF:43:60:AA:1F:03:49:2E:B4:21
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 0194BBCE89215CFF833F1F17206AEAA67306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: WMbaz78lK6PiS+MVGt2w2ezA/LPDuv/UVLPDQ/JNgZw=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:21:5c:ff:83:3f:1f:17:20:6a:ea:a6:73:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=dc7b433d34c516a7436dbf4360aa1f03492eb421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:7d:ce:26:78:63:b6:23:ad:ee:84:5d:e6:
31:64:11:d7:41:9a:35:20:85:db:d1:aa:fc:62:53:
be:41:ae:b4:b8:6b:4a:6c:10:df:62:8f:c3:9e:48:
58:40:d4:d0:df:b9:6c:54:37:12:f4:43:e4:23:f9:
8a:31:e1:10:1f:85:8e:20:3c:05:85:c0:a4:4a:26:
c9:19:74:5c:38:79:a0:91:b7:30:7f:48:85:f6:98:
42:d8:12:07:b6:5c:54:d6:98:a6:21:1c:8a:ae:aa:
11:4e:44:65:ec:7d:01:16:60:79:91:52:4a:80:01:
11:0e:e2:35:e5:e5:94:38:6f:84:91:c1:5d:b4:d3:
97:5b:c1:d7:2b:d3:29:78:b0:8f:8a:5f:2e:1d:07:
a9:96:88:14:fe:28:c5:11:b7:dc:24:b8:9a:a4:d1:
a4:e1:6b:be:5d:fe:ab:a0:79:62:d4:47:ee:b1:38:
4b:b0:6d:2c:62:d0:4c:4b:75:ab:3d:d3:cb:19:f9:
a0:b2:d4:b4:c8:2b:b8:7b:bf:ae:4d:a7:7f:c5:3c:
ad:bb:41:ce:55:6f:a3:23:cc:44:09:a0:52:3e:69:
4c:06:6d:c1:d8:77:73:b7:97:8e:ce:fb:93:ab:6a:
de:1d:13:c3:03:b4:ba:4c:42:51:94:18:8e:a4:d8:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7B:43:3D:34:C5:16:A7:43:6D:BF:43:60:AA:1F:03:49:2E:B4:21
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dd:9e:10:d2:4f:e6:f1:7e:e3:28:6c:7f:98:5d:00:7f:b3:
00:9d:f6:37:ef:71:c6:f2:42:51:79:20:3f:46:92:84:8c:92:
6f:37:c0:d4:ba:ab:d8:d8:32:3f:9a:6c:c7:d9:54:ae:a9:47:
2d:6d:3c:a6:04:0d:ea:49:52:cc:19:65:b7:98:cd:3d:e8:ee:
55:ae:51:8f:7c:38:2f:bc:73:08:e3:78:33:e7:0b:f0:01:ef:
3e:40:ef:cc:38:ad:c0:f6:b8:04:72:4b:51:3f:63:4d:db:89:
6a:46:28:e9:7e:34:f2:bd:c8:bd:39:89:89:79:69:76:88:c2:
ef:9d:f8:40:ab:44:f7:eb:1d:32:eb:b2:de:b4:8c:ce:18:9c:
96:64:fa:b2:7a:38:0a:7c:ff:7e:e1:26:f4:49:35:40:d6:da:
e9:9e:a6:7d:46:5b:53:cf:ad:31:d0:99:80:22:2e:09:09:e6:
74:d0:70:32:94:31:b4:cb:c2:86:db:a8:bf:bb:27:10:9f:c1:
8a:99:93:ba:87:bc:c1:f0:40:b0:60:0c:7f:91:05:42:84:e9:
4e:80:5b:ca:ce:f8:85:bb:31:95:17:bc:29:9e:cd:6d:d0:54:
af:1e:e4:f3:f3:f3:42:aa:84:48:0d:c6:45:20:9f:37:dd:c9:
0e:f4:03:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client