Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: VWK4yh3lymyNfzqnzjuEJj8pbpfPEPd6Rpksr7F90/c=
Subject key identifier: 22:38:C2:C9:C0:2A:D2:19:9C:A5:DC:93:A5:F2:9C:C8:9B:96:CA:FF
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 0194BBCE635251119D193E2476BB41DCFF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: s+zmZMQ/dCyPOjP0hxxBLihmZaQKLOvQ8AkxKaMGyVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:63:52:51:11:9d:19:3e:24:76:bb:41:dc:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=2238c2c9c02ad2199ca5dc93a5f29cc89b96caff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:0b:5d:f7:b1:31:f9:0b:53:95:46:2d:45:
5c:eb:c1:33:57:41:86:0f:e8:56:69:07:8b:30:e4:
76:1d:3c:fb:97:04:f3:bc:7a:83:23:b7:d0:a1:33:
b0:0f:84:95:3d:16:5d:5e:71:d3:60:9a:e0:6b:ae:
e8:97:be:26:41:fb:65:a7:bf:02:aa:ee:42:3f:bf:
97:43:c9:50:61:9e:ff:a6:5a:d0:77:34:5e:1b:ec:
9f:c0:0a:59:95:57:45:cf:75:d7:45:55:d3:2b:de:
4e:67:9e:3d:f4:85:52:cd:07:08:68:81:cb:2f:86:
9b:d1:1d:bc:e5:cb:3c:c2:0d:a6:8f:4e:23:6e:c7:
eb:66:6f:8d:0e:71:ab:ff:5d:00:fc:67:16:f9:63:
5b:32:a3:08:4e:7f:cb:bf:6a:59:7c:68:fe:e2:0d:
5b:90:50:ef:56:4e:11:41:85:ee:a0:6a:4d:a9:66:
9f:71:28:cf:4c:cc:a5:89:d1:a5:2d:3f:25:04:20:
d9:07:90:90:cf:c1:df:83:61:0f:6b:ab:32:ea:49:
00:87:a7:4b:79:53:cf:83:ea:8f:e9:62:20:b4:a2:
24:a5:a9:87:7c:3f:15:30:93:57:e8:26:a5:54:a7:
7f:f8:67:26:c4:7b:21:cc:26:b3:15:29:e3:5c:1d:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:C2:C9:C0:2A:D2:19:9C:A5:DC:93:A5:F2:9C:C8:9B:96:CA:FF
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1b:98:16:22:9a:e6:33:a9:96:56:15:e4:01:a9:6b:82:86:
a3:d2:92:2b:10:9f:d8:42:d5:b5:42:f7:2b:63:81:33:15:d9:
bb:fb:ed:96:0a:aa:a3:6f:6a:b4:ff:0b:c0:4a:bd:ce:cc:3a:
6f:77:4a:d7:1e:20:bf:e4:1d:5c:d3:2d:2d:2a:35:cd:98:7d:
cf:4b:d4:99:31:7c:b8:11:ad:1d:26:d0:6c:b6:ed:6e:a0:ef:
aa:0f:aa:17:46:96:dc:d0:e9:99:39:dd:3c:22:fe:1d:b9:6b:
0d:ee:13:1c:33:9a:b6:b5:7a:19:ba:f5:63:71:6f:a4:bb:9b:
79:1b:82:21:b4:db:14:10:f3:78:8b:ce:53:d6:be:fd:85:2d:
5b:8a:bf:e3:78:1e:bb:c4:98:e4:04:cc:d4:cc:d5:44:71:e1:
dd:57:ee:b2:05:b3:d0:48:c0:d9:75:62:bb:fd:6c:47:f7:0f:
c8:77:42:89:3a:a4:7d:a0:a5:fe:f1:6a:dc:5a:a9:e6:53:ef:
f1:40:65:f9:f3:29:e7:5f:47:94:18:1e:eb:97:2c:8f:22:68:
fe:b3:d3:38:ea:52:45:40:10:f8:7b:a8:1e:91:0f:ae:ee:05:
49:75:d0:6a:83:10:f8:7a:d4:ad:0d:39:10:d0:31:03:55:10:
c5:cd:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:03 2025 by rpki-client