Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: ny7P5a0sHpfNo+YqJ4tfnfLKhsJbsWzfDwccewA9phY=
Subject key identifier: CF:0C:63:8D:8C:EC:D4:37:DB:A6:77:AD:AB:C4:BC:90:1E:F0:81:D9
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 0194BC3C160D62E2DEFC61258BF764EF7376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: am3Sy264Yl-JO5WdEXeWKKEs9ps.roa (hash: 9k8mynHVOZTwg4WDO/sfA0hKUXErmcKqWcYze5ZqrNU=)
2: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: nFL/18Unjq3mWnELn8HjuTxjERrCXV/OWPD6xQdYBtQ=)
3: sXyVeEgdrOK8h5ebOKwuNo_SSAg.roa (hash: ESBdMDmOcBiwaOXHXdAgFsuBwburzoKdU0lwdUGfYAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:16:0d:62:e2:de:fc:61:25:8b:f7:64:ef:73:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=cf0c638d8cecd437dba677adabc4bc901ef081d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:c1:bc:21:4e:bf:68:00:08:34:99:37:9c:
3e:cc:d9:d0:27:f5:a7:58:44:c3:9f:78:57:82:00:
81:26:9f:7e:57:0d:c6:4c:ab:30:70:05:72:02:c7:
90:30:1c:af:18:0f:c3:10:76:9b:a6:47:bd:99:25:
13:f2:97:e6:f3:3e:6d:2b:d0:37:17:ff:56:6e:e2:
05:d0:b7:cb:b2:1e:a8:3a:45:fe:45:d2:91:6c:87:
70:e8:0e:b8:9f:7d:aa:d2:7b:6e:cc:f6:0e:4c:80:
fd:44:cf:04:08:78:e6:97:4c:64:ac:a5:f3:6f:36:
5a:93:7f:8c:0f:5a:d5:0a:77:cf:e2:e7:1e:ec:1f:
28:84:6f:92:7c:1f:87:37:d6:09:00:0c:c5:3d:99:
b5:dc:25:52:d1:61:37:a5:ed:7b:15:ea:4a:64:9c:
8c:43:95:06:65:f8:68:f8:cf:0d:b3:0c:7c:f8:3c:
9f:57:5b:0f:fe:31:f7:5d:65:5c:1a:d1:b6:15:1a:
7d:08:52:04:27:24:9a:41:8b:a0:85:65:7a:89:e1:
19:78:db:5f:b9:79:56:f2:1c:f4:d2:24:5c:55:bc:
33:c3:dc:17:f7:11:d9:76:15:08:c1:e4:b9:64:42:
5a:ae:12:c1:91:04:b2:25:0c:08:ed:e3:9f:c0:a1:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0C:63:8D:8C:EC:D4:37:DB:A6:77:AD:AB:C4:BC:90:1E:F0:81:D9
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1a:f8:bb:1e:18:5a:2f:5a:55:54:bd:78:95:62:5b:b9:a9:
98:74:50:dc:12:36:e9:3e:22:4b:b0:f7:06:50:18:c9:5a:a3:
08:32:04:52:69:89:c5:2b:1d:19:b2:11:82:46:a4:bd:31:e8:
f0:25:d0:3d:d3:a8:bb:70:a0:fa:ea:2b:7d:c1:c1:df:8d:95:
4c:05:d9:3b:5e:df:03:77:fc:10:0a:84:1c:0f:3c:12:57:29:
0c:7c:21:9c:f6:24:ae:00:94:14:53:ff:83:d3:c7:ff:e1:60:
4f:9e:bb:54:c4:8a:78:55:e1:4c:52:16:87:21:1d:3f:db:fe:
2b:24:32:1f:af:7a:66:a5:3a:99:16:95:99:d1:2f:19:95:cf:
fb:1c:f8:60:69:a0:4e:49:91:6a:c4:e1:2b:02:ad:27:7e:06:
41:55:88:77:8a:46:0e:82:01:ea:fa:cd:62:22:ee:d6:3e:05:
c9:2c:d6:98:e3:fc:85:53:61:9a:92:a3:37:b3:23:9d:39:a8:
31:b5:85:53:27:62:8e:43:a8:db:ba:82:1c:84:c0:8f:74:64:
b2:e8:c4:84:8f:c6:bd:fe:2b:55:73:19:80:77:51:8f:3f:cb:
5e:9f:87:a5:f5:35:56:1b:7b:f2:ad:67:98:05:0f:08:52:c7:
c7:c2:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:16 2025 by rpki-client