Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File: 0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier: 3snzcujU48q7cftatapG8kPqaydxY9ilCQRDlPTD3PA=
Subject key identifier: D6:88:E4:EB:58:C8:EC:62:0D:12:E4:D5:BB:E8:34:FF:C9:70:A6:13
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 0194BCE08E8B6DF15B674C1B5846F2EC025E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number: 12EB
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: lLvIkoi+6b9aUd6U+EuUCuL7xaL5Cyr/oyyrhl9IrFo=)
2: Eoa2DgYKZQhIPrEs2BVXe4pbre4.roa (hash: Lzu15VnANjg8WWEayf+Lga5VSNyXHu7NEi9f0IPI47U=)
3: N1PB4wkghMthA8l4GP9N1SzOEWE.roa (hash: 8LPlkWhxVtJM+jMtTkRPToXaYbmZ6b57zhGOgt0FEmU=)
4: V7B5ePYrHsO0XNRkMFSzpgb0L6o.roa (hash: mqOCLJjTNfcn+4Yc3m3WAArsC6xNXAO5dY/bAJctVR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8e:8b:6d:f1:5b:67:4c:1b:58:46:f2:ec:02:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=d688e4eb58c8ec620d12e4d5bbe834ffc970a613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:c5:f6:73:16:21:4c:0f:58:4c:2c:e5:b6:
51:8b:df:c0:0c:7e:98:78:8a:dc:f0:60:b6:54:fe:
f0:08:b3:a3:8e:2d:c4:07:d4:23:48:d2:2e:18:95:
28:01:dc:0e:c8:51:c4:ad:f9:44:0c:ef:7e:62:8a:
ea:59:59:b1:10:7a:8c:7f:aa:18:09:0e:b1:b2:ed:
d2:58:12:ac:06:6c:50:65:c0:8e:dd:b5:e8:fe:19:
e9:3f:d6:81:a3:68:4f:7e:b2:1e:7d:f7:85:29:31:
aa:a3:5a:63:de:05:ac:bb:44:fb:7f:a8:8a:6d:7c:
cc:80:87:df:5c:ca:29:6a:7a:02:62:39:a9:36:3a:
20:c5:23:35:05:2b:8f:eb:1f:14:3d:28:c4:45:cd:
b5:d4:12:85:18:da:3b:23:2e:c9:66:57:42:53:e5:
29:d1:41:13:ab:bd:ea:af:d3:cf:7d:f6:b8:71:5a:
b0:b6:cc:9a:66:7a:5a:86:1d:29:e3:79:88:9b:ca:
d8:1f:c9:4c:28:72:ab:11:54:0e:ca:e9:b3:e7:5a:
60:40:d1:17:17:7b:ab:47:76:96:a3:ed:a0:47:ec:
60:00:4f:c2:c2:2f:b8:66:9d:9e:51:23:07:1a:c2:
c8:5c:23:93:05:22:2b:45:03:ea:9c:6a:ef:fd:49:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:E4:EB:58:C8:EC:62:0D:12:E4:D5:BB:E8:34:FF:C9:70:A6:13
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a3:0f:0f:15:aa:10:2e:a6:f2:4f:06:46:f0:ab:3d:3a:31:
c5:5e:01:1f:35:73:ff:b1:54:b3:68:9f:d8:f1:0c:d4:9c:29:
6b:19:91:8a:e0:3f:16:51:37:49:c7:54:bf:8a:2e:df:16:4d:
d7:20:96:ee:f1:74:d8:83:fc:73:22:e4:8f:a4:4f:cc:9f:cc:
48:06:a5:1e:44:4a:26:4d:ea:9e:a8:ff:25:15:48:af:cc:a7:
b1:28:da:c3:b0:b3:24:40:48:5e:b4:41:44:dc:80:1f:0b:d0:
a9:40:3a:de:a6:89:00:b1:7b:76:45:70:b9:b4:e4:69:44:d4:
09:ea:d8:b3:f7:04:65:4c:5f:5a:7e:4c:3f:c9:9d:95:0c:ca:
ec:7e:07:0c:41:a4:b8:e2:d8:b7:59:fe:ce:f4:eb:7e:c9:94:
cc:72:fa:dd:34:c4:7c:46:13:c1:93:8a:b4:c9:db:8f:0b:3d:
ed:20:bd:7e:07:a7:33:fb:53:a2:59:47:7b:79:76:7b:e1:2c:
01:f0:3e:1e:5d:7a:a4:b4:78:83:b2:44:bd:47:a5:54:fc:8d:
d7:27:de:22:2f:66:20:ca:b1:36:6e:1f:9d:83:2c:8a:77:6c:
7a:c0:7b:6b:1a:51:a9:38:e5:01:f8:06:14:a6:74:e3:1c:34:
a5:2d:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:47 2025 by rpki-client