
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: D3Re2d/w3rlzNRBG/lGf1i1j15mMQJw/N4tV0cYUQ+s=
Subject key identifier: 70:78:23:8E:2E:54:5B:5E:4F:05:11:0F:54:F0:36:D0:E4:61:E9:96
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 0194BC72FBB50B0096E1FBA00E655EB84E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0B24
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: PmGk0bgKZQiesxrvA3HMFADMx13OL+9zoLYwIz+ytYQ=)
2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:b5:0b:00:96:e1:fb:a0:0e:65:5e:b8:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=7078238e2e545b5e4f05110f54f036d0e461e996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:88:86:85:b1:8c:2a:6b:ca:40:3f:a6:9c:
e0:76:fc:86:b1:a6:f5:0c:d1:fc:63:d8:a3:8b:b5:
03:02:35:9c:0f:c9:b4:48:c5:12:63:f5:b7:f9:80:
6c:22:ab:d6:e8:61:40:d8:5c:09:a5:29:bf:00:19:
29:d6:f9:b6:42:21:26:94:66:8d:db:e1:98:5c:55:
d7:46:6f:6d:69:6e:ab:52:c8:2d:91:54:c2:78:aa:
d6:f8:e8:9a:b4:d5:fc:7a:ee:13:a4:fd:3d:c3:e7:
d0:2e:19:88:c8:dd:d0:01:5c:5c:92:a5:7a:00:c9:
0b:26:4f:3e:57:53:f3:a2:d5:ba:14:36:2e:53:5e:
4e:4b:bd:5e:6a:41:a7:87:14:4f:44:61:d1:8d:4d:
90:cd:fe:30:73:52:f5:15:08:11:3f:9e:dc:43:94:
a4:71:a5:6a:be:d7:88:c2:13:0e:e8:e2:e3:1f:9d:
17:74:33:e1:7b:5f:ee:46:6f:58:ff:9b:19:77:fb:
b7:7a:17:09:fb:87:74:b0:71:41:b0:03:9a:bc:81:
0c:67:dc:92:2d:36:69:8c:43:e4:71:8d:4d:18:8f:
ee:8c:25:e0:09:98:15:23:34:e4:b5:72:89:08:2a:
27:96:b9:d1:5d:8e:d6:74:7f:b3:cb:db:d1:86:0a:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:23:8E:2E:54:5B:5E:4F:05:11:0F:54:F0:36:D0:E4:61:E9:96
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:99:03:8a:19:b7:0d:c6:53:7c:bf:4b:42:55:00:f6:94:32:
95:20:96:60:d7:fe:4d:67:da:ff:da:29:eb:59:c5:e5:68:4c:
8d:32:b2:ad:b0:41:f9:65:df:2a:55:47:53:e3:c2:40:83:dd:
24:79:39:aa:b1:e6:eb:d5:7a:0f:96:c0:0a:68:b9:0c:8c:b7:
92:9f:59:19:61:8c:aa:3c:ab:e2:8d:26:4d:7a:bb:34:d4:4a:
98:11:93:93:27:f8:48:62:49:6f:da:73:8f:b4:24:e4:e1:3d:
f5:e3:9f:90:ed:9a:f1:53:3a:05:52:70:84:f9:95:ae:55:c4:
e9:97:d6:43:53:3c:19:2b:bf:35:c0:66:27:f1:29:19:af:9b:
fc:c7:d5:37:6c:05:7e:11:bf:f0:2b:96:b7:af:89:e0:72:87:
2b:2f:80:78:bc:a4:a4:59:3e:49:29:d2:75:30:a2:85:19:9a:
71:35:59:7f:58:a2:7b:6c:a0:a8:79:28:1e:f4:33:44:f7:12:
44:ba:90:18:66:08:e2:77:d7:69:03:fa:6b:41:14:af:48:16:
7c:73:59:3b:cb:d1:b0:7b:e5:9a:e8:9e:4e:66:99:15:fb:50:
7e:d2:7a:32:21:f4:f9:ee:44:0e:fa:0b:58:2e:e0:ad:27:93:
ea:d6:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:52 2025 by rpki-client