Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
File: 0f00NtehmnND-oANh6Aa8YPaMYs.mft (raw, json)
Hash identifier: aHY16QHRvLqHB/Ns3xZLhx1hYVR5zyePqzpDcYA+mCY=
Subject key identifier: CC:4E:AA:FB:EE:5C:7A:B1:65:C3:FA:8D:06:CB:13:5B:2B:6B:63:30
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial: 0194BCAA3DC4F650D965834F485CF9E61A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
Manifest number: 0A36
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 0f00NtehmnND-oANh6Aa8YPaMYs.crl (hash: Tnk5pMC38ccsXDHkmBJcJMq+JxolNftOYSGov+UpZn8=)
2: 289E-Jj1-_NHnfIspmJ6dDyJHMo.roa (hash: WdW5apU9mzQj50OlelJWc6bz8hGD+pm8qBunEBj3yw4=)
3: h6nXa6s8OWHMrQG1DSMZKlfJDE8.roa (hash: oPs+na6jf/GLFYpEpQKvloInu3ZuLoam22sOPdiiyEs=)
4: iW93Iii_wpRaBJx4UitIZE8Hirs.roa (hash: nFhRjV7MRzVZ4mQI/ZjUoZj1OD4mh/1+uDWJfZv9Rc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3d:c4:f6:50:d9:65:83:4f:48:5c:f9:e6:1a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=cc4eaafbee5c7ab165c3fa8d06cb135b2b6b6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:c8:52:12:2e:e2:30:89:a1:a7:52:d8:c4:
e5:fb:33:dd:5d:9f:31:89:b7:d4:68:09:5c:da:24:
78:ec:cf:78:cb:04:db:73:fb:22:fe:4c:03:e0:ba:
09:77:fb:4b:2c:57:07:17:7f:23:c9:6f:79:af:3b:
f6:e0:20:8b:66:6c:4b:9a:e3:d8:df:2c:12:36:e2:
52:13:88:a0:ca:dc:e8:84:74:a2:eb:72:95:17:13:
98:a1:55:16:66:7b:2b:2c:70:be:cc:07:ca:fc:30:
22:27:f9:de:3d:ec:04:29:cc:c4:aa:2b:10:f3:eb:
48:e3:44:22:95:ee:75:66:ae:36:5b:5c:49:da:68:
0c:ea:9e:31:57:e3:1f:ec:bd:bb:8e:58:ea:72:78:
13:45:31:f9:75:08:1a:6e:57:a7:47:4e:5e:b7:98:
9c:36:69:0d:37:41:99:4d:57:c3:dd:b5:24:54:5e:
5e:68:ec:35:0a:e7:3c:59:f1:eb:45:26:60:9b:7a:
15:81:36:3b:5c:38:36:3f:5e:29:9e:f0:b8:57:3e:
43:28:44:16:78:14:f5:4a:82:bc:6a:4f:f1:02:88:
63:ac:89:0c:59:d0:c3:08:ad:5b:e5:9e:76:cd:0d:
58:84:5e:2b:81:0b:50:f6:14:db:0d:be:4a:81:6e:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:AA:FB:EE:5C:7A:B1:65:C3:FA:8D:06:CB:13:5B:2B:6B:63:30
X509v3 Authority Key Identifier:
keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:27:93:af:4e:f9:15:61:3b:13:06:ff:25:79:c7:0c:a0:b2:
af:f9:34:ab:91:6b:06:ee:b3:8e:41:7e:a4:8b:ff:52:c4:f4:
37:83:5d:55:b9:ea:b7:71:52:de:e8:56:4f:88:f6:73:23:0a:
c9:af:08:f0:43:24:91:c2:44:0e:6c:06:dd:95:62:e4:82:d1:
12:78:53:f0:ac:06:bc:6b:2d:c9:ca:8a:6c:e9:5d:eb:90:ae:
18:6f:a9:66:51:18:93:d0:e6:a6:ed:14:9b:4c:03:66:03:03:
49:c5:77:9e:5d:42:23:c5:e0:48:8c:4c:92:4e:d9:78:da:15:
eb:71:64:97:f4:45:cc:7c:81:5b:9e:32:15:03:46:40:54:ab:
1d:cd:07:e7:63:e8:61:46:c5:97:49:17:97:62:c5:ac:aa:38:
6d:7c:cf:cd:87:b5:b3:07:05:ed:f3:a9:2b:ee:03:20:d4:ae:
c7:69:57:32:12:4c:12:d3:18:ad:3d:94:37:46:b9:e7:3a:09:
62:c4:48:93:e4:8a:55:20:b0:5f:f6:b8:f3:03:fd:cf:7d:5a:
e3:b3:e9:4f:d0:eb:92:69:a5:73:d8:ef:10:22:54:ca:ea:f3:
1e:6e:bc:69:80:cc:51:a1:5d:ce:fc:cf:21:ec:d3:20:e3:e2:
44:c3:04:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:15 2025 by rpki-client