Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft (raw, json)
Hash identifier: gaKLPvIQ11nPDkPt0VK/WbpwcrpVXf9lddLMI3OTbDA=
Subject key identifier: 58:BD:85:C8:B2:A0:BD:DA:29:CF:3C:EE:B3:FA:ED:29:03:E9:EF:3F
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 0194BCAA15C43826B204B2076A001DBB470A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
Manifest number: 015B
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: kdQZ4QS0sUqXnywKZ8M79hUmfTA.roa (hash: xGG3G4XfdVhcDuFzw8EOPzLUi5vn/b3D8pkyEY9PSkc=)
2: tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl (hash: COwRQNvHLcoSZtZAqXRuH8YvbBmS/IwJAZjN7nT6x9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:c4:38:26:b2:04:b2:07:6a:00:1d:bb:47:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=58bd85c8b2a0bdda29cf3ceeb3faed2903e9ef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:a0:89:78:e6:ae:c2:73:1d:cc:e1:6c:cd:
6b:a5:77:bc:5a:a9:f0:32:7c:a3:66:09:3a:45:85:
98:55:8a:7e:22:3d:b0:2f:e0:0a:12:75:0f:9c:db:
42:0a:d9:ca:87:20:80:0d:af:72:3d:61:8a:b0:46:
f5:8f:7b:0b:7e:db:25:a9:21:ef:6f:73:04:09:cc:
e0:e9:34:6d:77:02:47:15:6e:5e:9d:66:64:cf:03:
34:8e:25:76:3e:68:86:48:ea:a3:ab:e7:ee:e7:0c:
e4:8a:eb:c9:f1:c5:c4:6b:40:54:2b:9a:b2:b4:c5:
71:7f:09:9c:e7:47:cf:bf:82:f0:c6:af:1b:8a:20:
67:44:66:f5:52:f6:83:8d:49:33:d3:7c:0a:26:a4:
54:5d:87:b1:c3:7a:b6:81:43:35:fb:b0:c7:d0:7c:
45:9a:a8:63:66:8e:fc:6f:66:a8:5b:56:fe:7e:9d:
f5:41:63:2c:a3:a2:43:dc:5a:b4:f3:5f:31:c6:a8:
03:ae:09:6e:06:4a:a7:8a:df:84:ee:a5:bb:f0:52:
60:bd:8f:10:7b:c0:0b:02:5e:95:c3:e5:1c:1e:6a:
5c:73:17:f1:2d:bf:d5:f8:32:87:16:e9:12:08:62:
05:7f:53:72:a5:20:f9:00:77:1a:68:a6:8a:8b:dc:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BD:85:C8:B2:A0:BD:DA:29:CF:3C:EE:B3:FA:ED:29:03:E9:EF:3F
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:f8:cf:8b:45:88:a6:3f:42:06:22:c5:a8:93:0d:f6:90:
6e:72:2c:7a:14:07:06:1f:5a:ea:7f:1e:bd:87:3f:3f:aa:84:
77:03:8b:8b:04:c3:42:5f:b9:b1:04:9d:bd:6d:a0:34:32:7b:
17:ea:28:67:77:a1:f4:2b:ab:ae:95:51:77:e5:5b:4b:69:dd:
02:b2:39:61:6b:4a:7c:e8:65:ec:1b:1f:c7:cb:f5:29:35:3f:
39:c8:c7:98:25:47:ca:63:18:89:db:37:0a:79:60:e0:44:25:
7a:b8:19:e3:13:c9:fd:14:ff:15:fd:ed:9b:d9:02:45:ff:21:
c6:ef:62:8d:0f:b1:66:2b:ae:08:3b:ee:38:52:c9:d9:ef:ce:
fa:b7:e7:09:cd:f2:d3:cf:8e:ec:db:97:a1:d2:02:5b:54:d0:
b4:1f:56:57:1b:14:ae:d2:e2:04:bf:bf:ca:86:3a:58:09:c0:
29:14:6f:b8:b5:59:38:8d:3e:4f:12:05:de:71:0f:c0:7e:b3:
20:97:71:37:b9:9c:d2:a7:ed:ee:86:f6:6a:ed:dd:ff:dd:88:
43:c0:e5:0e:c9:22:1f:53:2a:4b:23:b5:9e:df:ba:af:eb:97:
36:2a:3e:b9:5d:15:8e:96:64:64:df:c3:21:47:c2:2f:c6:b4:
23:8b:b1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:14 2025 by rpki-client