Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: DrwGTasfWQWkuW38k4DuJgzBLaEH4+Y+qs4zDbbmKOQ=
Subject key identifier: 97:9F:64:87:6C:FB:50:2D:09:F9:5D:DB:11:0F:B7:A6:48:99:5F:37
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 0194BC731A2CB859ACAF2A04425586249ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: Dwcmt58hfgdT/CX5o3Jq0qMqTUiOhZtEc9BO99mSVxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1a:2c:b8:59:ac:af:2a:04:42:55:86:24:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=979f64876cfb502d09f95ddb110fb7a648995f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:78:ba:14:cd:45:ff:a6:1b:a1:9e:a5:fe:
2c:21:22:1e:0f:46:d5:df:ab:eb:6a:f4:b9:ee:6f:
31:92:26:bc:e2:d3:d6:98:86:16:7c:6b:53:cc:d8:
67:9a:28:a1:db:f3:7c:88:5f:fe:e7:13:9c:84:45:
9f:2d:38:97:92:07:e7:bc:37:cd:0e:b8:3b:3b:03:
90:09:4d:72:a3:49:db:55:6a:27:95:89:0e:6d:5c:
f3:3a:6b:48:60:1d:ca:f6:ed:6b:86:a9:be:86:29:
d2:da:09:4a:7a:01:b2:22:16:d5:4a:02:a4:09:32:
64:db:7e:91:e9:62:96:2d:91:40:86:42:62:b5:53:
1b:95:c2:f9:16:d1:57:11:c3:c0:b7:65:fd:d5:ca:
ee:97:4c:99:5d:52:7b:4f:2e:aa:b9:31:7c:4e:a6:
09:54:4b:e9:5d:80:3e:20:7b:37:de:4d:ee:f1:c5:
84:d4:fc:05:42:55:43:aa:d5:74:e4:1b:dc:9d:bf:
a9:27:3e:03:5f:22:3c:e1:23:38:39:aa:f4:9b:86:
0f:e0:e7:fd:79:a7:f2:cb:7f:05:b2:60:b1:f9:f5:
0d:60:a1:95:aa:ff:ec:a4:e3:a0:23:20:68:fc:09:
31:d1:d4:e3:7a:46:34:d9:d8:d2:da:ce:31:c6:30:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:64:87:6C:FB:50:2D:09:F9:5D:DB:11:0F:B7:A6:48:99:5F:37
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:0d:fd:91:5e:74:0d:d4:39:9f:22:be:2f:2e:3c:d8:62:
d2:ae:c6:ba:07:a0:89:bc:9a:dd:b5:d3:d1:61:85:43:22:a2:
3b:87:e7:76:7c:d0:0c:bd:59:5a:55:14:c9:66:cc:78:14:af:
f7:c7:a0:69:8b:6c:85:97:a1:64:13:80:5d:04:a0:0e:65:e6:
5f:c8:b9:0f:27:19:0d:71:a2:29:0d:24:58:67:40:1d:87:41:
ac:b4:98:82:4b:a0:4b:ff:4b:cc:10:52:8b:9b:55:89:e2:61:
55:88:65:66:b2:09:eb:c7:ba:9e:12:50:75:f8:b4:39:8b:fa:
ae:06:81:6e:e8:10:cf:d7:cd:59:b3:dc:ae:5c:3b:59:f5:4a:
34:3f:3e:e0:f7:bb:36:dd:3f:59:97:cf:ac:bd:4b:cf:45:84:
ab:f7:56:c8:32:4d:1d:5a:34:41:dd:dd:2a:b7:76:0e:db:55:
fe:67:5f:4d:76:c8:83:4f:14:c1:56:12:9d:4c:d2:d6:1e:b3:
cb:57:4c:3e:be:d4:3a:92:75:16:6b:c9:57:64:2c:b5:b8:76:
af:af:bc:ad:f1:a3:d0:2e:d3:a0:9a:2c:3d:90:0b:cb:d6:73:
07:72:46:52:53:d2:e2:d9:a0:3c:f7:66:f4:08:3e:17:9a:ec:
71:98:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:03 2025 by rpki-client