Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: LIifa8lxNfceM+cbi+vH/WQW3F5qKBBwKA+bFZS3Isk=
Subject key identifier: E0:EB:3E:6A:23:59:2B:AC:6E:91:B7:BF:A2:32:18:19:DF:E3:4F:F1
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 0194BCAA3EA8EFFE3D245F9EEB6246E05390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0783
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: xdJrBFd37G8lxV5q0o7UEj0fi/nUusAUJjkLAC74z08=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:a8:ef:fe:3d:24:5f:9e:eb:62:46:e0:53:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=e0eb3e6a23592bac6e91b7bfa2321819dfe34ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:90:fe:4a:45:c4:e7:db:09:16:a8:05:23:
89:88:c1:01:76:98:66:b0:07:b2:52:0e:c0:20:38:
e6:4a:a2:d8:64:35:1a:18:e4:f9:f3:64:75:ec:aa:
df:e4:21:18:5b:c7:7e:b3:3d:15:8a:8d:51:a0:1c:
2e:4a:8e:93:74:fe:89:40:57:7b:36:07:a9:98:5e:
51:c7:ac:0b:82:41:17:82:31:8a:17:83:fa:c7:e0:
52:3e:4b:1f:68:87:43:44:f9:c2:09:2b:9f:4c:a4:
86:13:d2:2a:ee:46:87:bc:ab:1e:b2:36:d5:b3:bd:
94:c9:76:d2:7b:4f:87:52:25:c3:f7:f3:5c:4f:78:
8d:d1:b4:3c:30:7a:b1:f9:19:72:dd:22:94:29:a4:
91:9b:3c:0e:2e:cc:1a:76:09:06:f5:6c:44:9a:2c:
da:90:bd:d6:52:69:75:32:1d:df:f8:31:4e:2c:ab:
fe:32:9a:4e:db:71:4b:81:c6:5d:e6:ea:68:7a:6c:
da:2c:a3:dc:13:31:91:96:0a:e1:8b:79:ea:6f:22:
d2:8e:19:2d:7e:e3:d5:e0:1b:e1:97:3a:44:c5:1b:
4b:35:c3:c6:8b:c3:37:40:b6:e6:d5:c5:32:ac:5d:
04:a3:0a:f9:5b:39:94:44:db:0e:7f:96:b3:9f:c7:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:3E:6A:23:59:2B:AC:6E:91:B7:BF:A2:32:18:19:DF:E3:4F:F1
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:c8:3e:e8:fa:1a:09:ef:9a:2a:c6:c7:01:5d:90:ba:19:
92:85:92:87:16:de:a8:e5:25:77:59:b1:88:dc:c8:20:7e:7f:
96:24:8b:f3:47:89:15:34:d5:dc:35:fd:4d:47:3e:d7:c0:e7:
9d:a1:6c:67:90:40:99:f6:b9:ef:79:2a:5f:b1:43:2c:e2:24:
33:8e:a5:0d:93:3d:90:bf:12:93:89:81:20:ae:ce:bc:42:8f:
9a:7f:36:71:ea:85:7e:d0:8b:4b:9f:de:e1:88:85:80:da:0e:
62:3b:51:6d:38:d4:09:a3:b0:1f:d2:d6:63:14:19:ed:c4:d1:
32:ce:d4:fd:4f:cb:2a:4c:5e:e5:ce:b9:ee:37:ce:0b:5b:52:
c8:64:a2:09:0a:65:d2:a1:84:3d:78:17:1e:c3:b8:fc:73:e8:
ea:cf:15:81:25:63:4d:a8:ad:99:0a:42:de:65:c3:6b:76:d5:
ea:e2:98:8e:93:35:03:c5:a5:e6:65:26:90:79:b0:d7:01:39:
99:b9:33:88:b9:cc:a0:ce:6e:e1:fc:54:15:6a:1d:db:9f:76:
61:13:f9:01:77:df:8f:07:75:cc:9c:aa:a7:ae:70:0d:c0:84:
3b:6b:d8:99:6f:3f:f2:05:a4:21:14:7c:8b:22:f3:0c:2e:6e:
c6:04:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:04 2025 by rpki-client