Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: 0YLfZSYrsBgI3ovgYqUozlORmqlJLtOxAtucZ0MeW+4=
Subject key identifier: 89:C4:3D:83:00:63:BC:2B:46:65:53:23:F1:01:4D:37:BF:3C:4E:12
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 0194BBCE4FFC6DBF18D29A9AAE13B81C2F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=)
2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: s9ybh/rWoHd/7wPPyC2sxzc+I3fag5F9FgwmnBDLKmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:fc:6d:bf:18:d2:9a:9a:ae:13:b8:1c:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=89c43d830063bc2b46655323f1014d37bf3c4e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:23:64:a6:ee:06:73:ec:f5:b8:07:bd:aa:86:
c9:5f:32:fe:94:5b:3f:6e:cf:18:8a:50:cc:bb:96:
94:09:0c:65:4b:2b:a3:c1:12:ad:21:50:a8:50:e0:
bd:fc:d2:26:b7:63:37:13:41:13:67:79:71:2f:34:
0c:2b:21:af:d6:d7:51:a6:4b:b1:19:cf:c7:4d:01:
0c:d4:74:b6:9b:65:5e:95:95:1d:e9:51:61:66:c1:
c0:93:36:5e:30:37:a6:75:6a:3e:f6:0f:06:ac:02:
43:95:9d:c9:79:58:fd:fa:b1:27:c7:98:c7:7c:6e:
de:09:c0:f6:d3:ed:c4:a0:0d:05:5c:e6:00:2d:bf:
38:a3:cf:d1:d2:04:a4:4a:1d:b3:04:e7:51:f3:52:
a2:91:c7:6b:5c:81:3d:0e:0d:d3:68:1e:ef:ac:2b:
d4:a0:ed:d4:b0:d8:23:29:fe:31:a9:c7:b0:b9:77:
03:81:aa:39:ca:72:74:8f:f2:b0:03:e5:0a:61:41:
7b:64:3a:f1:07:d0:77:cd:04:44:58:1c:9a:05:45:
a4:ea:e4:62:61:f2:76:0d:61:a7:44:ba:3b:b4:b2:
df:52:8c:f3:da:66:31:0e:9e:04:c6:48:43:ba:d4:
4d:74:c3:a1:ce:90:2b:8d:b2:db:ea:38:b5:fa:44:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:3D:83:00:63:BC:2B:46:65:53:23:F1:01:4D:37:BF:3C:4E:12
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:fc:f0:2e:cd:12:f7:96:a4:b6:94:38:f9:b0:a6:f5:be:
e2:8c:93:95:1e:0a:fe:7e:b7:30:2d:ca:1c:38:3b:70:4c:ef:
8a:c0:be:f9:ac:8e:1c:fd:8b:85:c7:3b:06:37:72:30:14:ff:
54:ec:41:cf:14:98:41:8e:d8:5b:58:e0:62:ed:1c:8c:7b:90:
18:d8:17:8b:ee:37:e6:7f:28:8d:29:48:24:a9:03:52:fa:44:
a7:cc:06:b6:ac:99:a5:bd:7a:ad:69:f7:1f:52:cc:6a:e5:91:
e5:9b:75:87:43:12:5c:f7:4b:c5:77:28:c3:5d:79:d4:ae:02:
f6:90:e9:80:91:fd:bf:ad:53:03:5c:c5:f7:6d:ec:e4:4c:70:
08:b7:73:e5:18:84:98:52:1a:44:9d:91:4b:68:a1:24:28:f5:
ae:9a:96:fb:93:c9:c8:b6:37:9b:b2:2d:18:81:7a:63:ab:5e:
13:ed:51:74:7b:2a:6f:69:43:79:e8:23:bb:ab:46:9f:87:1e:
65:3c:7f:03:e6:8e:4c:ac:2d:93:f8:97:6b:fc:67:9a:18:a0:
37:88:f7:2b:c2:93:a7:a9:2b:94:dc:ed:be:54:74:5b:c8:ea:
72:68:79:fa:a4:92:af:a3:b1:cd:16:56:33:fd:a9:27:63:65:
f0:bf:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client