Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier: WK2DcoaWha9eZNMge9jpYdKQbYIhG+8QAxFqowo+VkA=
Subject key identifier: E1:C3:80:EE:54:28:E9:3D:A2:94:7F:BE:0B:37:65:41:3F:94:9F:DE
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial: 0194BD85308B17608D8FB13B380734943638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number: EF
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: 2jOeAzo1jZwURua+enYcxCieX/sethctLUDZWHIO/1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:30:8b:17:60:8d:8f:b1:3b:38:07:34:94:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=e1c380ee5428e93da2947fbe0b3765413f949fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:29:37:c6:d3:ed:de:fb:49:ab:90:84:aa:
ca:64:3e:c9:32:ae:6b:75:99:de:d7:0f:31:24:37:
bb:00:81:20:9a:4c:1c:9f:14:12:f2:08:e6:1b:8b:
ce:9c:4a:f2:06:e3:59:14:e5:e5:e4:d3:91:2f:52:
9a:c6:79:ae:b4:ec:c2:e2:9b:09:5c:9f:d7:48:5c:
55:ed:bb:42:d5:f3:3b:68:2f:a0:12:e7:00:43:54:
06:c8:d0:6c:34:6f:d7:57:0d:fc:d8:e1:eb:e0:56:
08:5a:c7:0b:9e:a8:73:1a:5f:36:6a:30:e6:38:a4:
bc:05:c5:cc:2b:20:e7:51:d4:fa:bf:59:c8:0e:b9:
72:71:8c:a3:31:32:9f:2f:8a:0f:a0:55:69:21:b3:
49:2f:c0:4e:9c:b5:73:3e:0a:e3:7e:4b:18:98:51:
79:16:42:de:bf:6f:6f:73:06:dd:0d:73:d6:97:91:
e6:65:72:e4:e1:07:73:18:88:32:2c:d0:7f:6f:16:
dc:51:a1:f2:c0:52:85:db:23:3b:06:a5:45:e5:1f:
ac:2c:b5:55:95:06:e3:65:73:75:cc:c7:9b:4b:b0:
0b:7e:f6:0a:7e:57:dd:ca:50:d0:1b:53:a6:83:52:
eb:8b:35:41:52:8f:71:93:f7:aa:e1:fe:a2:59:37:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C3:80:EE:54:28:E9:3D:A2:94:7F:BE:0B:37:65:41:3F:94:9F:DE
X509v3 Authority Key Identifier:
keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:39:d5:65:13:e1:aa:56:ad:74:f7:2f:fd:11:d9:5c:08:0a:
89:26:46:57:13:53:42:7c:2b:81:17:bc:fa:16:4b:99:1b:b0:
81:62:ce:21:38:58:9f:a3:ed:bf:4e:13:28:40:c3:a3:d5:7f:
6c:f4:1b:39:90:cc:40:55:b3:5a:5f:34:55:ff:a1:37:eb:05:
73:39:9f:d0:ec:61:ef:0c:54:b1:25:27:1a:f1:f1:21:fe:03:
d6:94:40:45:ae:bb:bf:d8:8c:d9:46:56:13:91:13:4a:b4:05:
00:b9:1e:71:71:7b:ac:ce:4e:f0:f5:31:65:58:93:7a:c1:b3:
62:75:7b:61:56:e8:c0:43:35:1c:4c:71:6c:21:94:67:7c:ae:
b7:1b:aa:45:b0:ee:9a:6a:35:c1:43:58:22:a9:00:f6:0e:13:
0c:61:bd:a3:85:d6:54:17:41:ad:fe:00:78:8f:60:ed:a2:09:
45:8c:f4:62:ec:3b:ea:89:99:f4:d9:25:b6:29:78:54:f5:e1:
bb:f0:7b:c3:35:f0:6c:dc:84:93:4c:95:2f:4f:03:18:e1:2b:
b8:68:7f:e7:49:45:65:97:fe:37:48:bb:f9:5b:a2:af:03:fd:
4f:23:8d:69:6f:5f:50:ce:76:83:eb:47:7d:df:99:40:80:93:
9f:ff:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:48 2025 by rpki-client