Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: FUiz4j61W5Z0RDPA81aNLZR3/4+AQye2197tUAzMab4=
Subject key identifier: 1A:CA:4A:80:66:76:61:C0:F9:95:66:E6:8D:93:21:22:0B:6C:98:AC
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 0194BD85353124BE8333EDC6BFEA230528F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 09F5
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: bdeeBye/XTBttlzSh0rTqrm7If5rlirFO3jad86ftlE=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:31:24:be:83:33:ed:c6:bf:ea:23:05:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=1aca4a80667661c0f99566e68d9321220b6c98ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:50:d1:c7:58:0b:58:83:1f:1c:1b:30:0b:
c1:d8:06:bf:54:e1:80:97:7b:e5:43:9b:3b:68:a9:
28:1f:bb:4f:95:84:0e:ee:2a:ef:5a:7e:2f:af:c8:
2a:a7:3f:bc:6b:1e:ce:77:5e:71:db:e6:23:85:0c:
3e:03:38:03:06:7d:e2:d4:c7:75:59:49:ec:83:2e:
42:63:06:35:01:4f:9c:a0:42:04:73:ac:97:b1:b1:
17:4e:ba:eb:90:df:5a:b5:64:4e:c7:81:da:2c:f3:
a0:cb:47:91:96:44:a5:aa:8a:2e:48:ed:49:cc:09:
c9:7f:e4:4a:bf:b3:51:25:31:07:aa:b1:ed:a0:20:
f6:88:d8:bc:6b:23:87:06:01:0e:d9:68:2b:db:52:
59:0e:80:14:19:fa:42:8c:db:ab:46:3b:50:8f:ab:
7f:38:88:4c:e7:b7:23:88:67:7e:5b:f4:4a:f2:19:
cc:8c:3d:53:50:4b:c7:0c:a8:fc:e1:58:a6:31:25:
db:9a:95:6d:28:23:8b:93:dd:90:f5:e6:07:ae:02:
60:40:7a:12:0e:f1:35:a6:f2:d3:d1:2c:7d:38:f2:
14:a2:db:29:d4:51:0d:37:68:c4:d5:5d:15:6f:41:
d8:7a:d5:10:71:03:a9:02:7d:f8:49:5e:b4:c5:e3:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:4A:80:66:76:61:C0:F9:95:66:E6:8D:93:21:22:0B:6C:98:AC
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:17:79:f1:bc:ea:58:f8:ed:b8:9a:7f:91:1b:fc:03:b9:2d:
e5:4b:23:a0:d0:f4:74:99:5b:2a:51:ce:94:90:4e:16:c4:47:
b3:aa:e3:c5:3e:a9:9f:6d:61:78:5d:79:8b:15:e6:c8:7e:00:
b9:dc:1e:80:9d:72:91:d9:4a:40:52:7f:a6:35:ea:61:50:8f:
54:65:10:87:06:76:d6:1e:6a:02:db:f0:86:23:7b:6c:57:bc:
b6:de:37:8a:06:7d:99:be:15:86:94:2d:fe:c2:36:ca:67:c2:
ba:6f:e7:80:a1:f9:83:85:8c:02:ab:2e:5b:d3:b3:1d:32:98:
5d:24:a9:68:2f:59:44:d7:32:a1:15:ab:3d:e7:cd:8c:80:d0:
41:18:87:01:5b:7f:52:90:ad:10:a1:ab:5a:be:f9:59:9a:86:
bf:67:2c:ba:90:f7:77:ae:ed:86:be:cb:e1:84:31:25:e1:07:
54:9b:2a:1f:a5:92:cb:c0:79:01:9f:9f:94:25:34:fb:9a:6d:
f6:a7:96:7b:56:dc:b5:e0:0c:0d:8d:74:68:17:ab:64:3c:90:
7a:e1:24:80:50:38:c5:07:5b:09:b3:24:ff:bd:26:1a:1d:de:
d6:f3:5a:46:aa:51:d5:8d:de:58:f7:7c:78:28:03:8b:3b:e0:
5f:ae:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:15 2025 by rpki-client