Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: mDrS3RRPyduEE+ZAnp7ez6qAr45/3epm3M3Tdmq6Clg=
Subject key identifier: 04:9E:AA:5A:E2:03:B6:36:55:7A:4C:7F:62:87:FA:4F:C8:5F:B4:A8
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 0194BCA9C625B5D7F4355F2E71BB9DE081F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 08DE
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: fO3CBZwzh8iiJj7QqzNLJvgLxUDDcuA1qee5/LGBOIU=)
2: k9VkkHu7wqpz0IelVxE8bU-qY6o.roa (hash: vCMb7FvkUh1quiKigDU5pU3f6Rl+/OZ8cn/L/kTas88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c6:25:b5:d7:f4:35:5f:2e:71:bb:9d:e0:81:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=049eaa5ae203b636557a4c7f6287fa4fc85fb4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:c8:fe:63:49:6d:e6:08:56:aa:8b:bc:80:
ff:2b:e3:cb:ec:1a:3d:01:a2:6b:33:47:12:19:3a:
07:3e:00:4b:ae:98:c1:4e:a8:ee:02:10:84:15:30:
0e:8f:e0:3b:83:16:84:8f:f8:4a:be:d3:17:21:92:
9d:20:42:6f:5a:98:37:70:45:08:23:47:96:be:51:
40:62:39:fb:12:34:4d:60:86:1a:9d:30:ed:64:4c:
17:c9:47:59:ce:9d:7a:cd:bc:86:b6:8f:54:65:72:
16:1d:02:b5:f2:e2:07:35:4b:a4:6b:d5:e9:55:66:
34:ac:dd:66:a9:7b:33:a3:53:8a:9d:c9:64:1b:86:
1f:78:52:9b:c4:b2:35:d6:a6:b6:bb:af:c5:be:cf:
29:24:2a:73:55:0c:e6:cc:fa:3c:0e:8e:14:af:38:
57:5e:1f:15:9b:36:12:a1:62:aa:06:94:53:38:13:
ac:76:0c:64:df:e2:f8:17:6b:06:66:d3:91:ef:c6:
b8:10:3f:77:fb:cc:9b:30:ff:0b:cf:4f:a9:b4:39:
76:23:74:34:bf:b3:cb:db:02:10:7c:8f:d7:2e:23:
45:7b:43:67:a4:4f:fe:e7:a7:87:62:c0:3f:63:a1:
02:63:1c:13:98:5e:ac:51:f0:d6:65:7d:22:2f:73:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:AA:5A:E2:03:B6:36:55:7A:4C:7F:62:87:FA:4F:C8:5F:B4:A8
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:fd:63:9e:8f:7d:8d:8e:d6:a1:e2:d0:9c:8b:86:4d:42:
13:a3:a6:71:f0:4f:5f:24:c5:5b:2e:24:3e:75:01:64:3c:e2:
17:f0:ad:75:5c:fd:de:d7:60:22:f5:20:fc:6b:d9:7b:84:b0:
02:44:48:88:e7:9e:3e:c8:7c:ee:08:f8:98:44:a5:f3:8a:9a:
d8:de:dc:56:b3:d7:75:61:6a:7c:4f:1c:8b:95:9a:5f:b8:00:
18:f9:c5:69:b0:76:c3:3a:ef:ec:85:51:24:e1:ed:c6:e3:41:
a4:4b:ee:15:2b:f5:e8:68:d0:6e:30:82:e9:be:79:86:15:36:
44:99:0e:80:5a:c9:ba:0f:56:74:75:26:da:97:21:6a:0c:cd:
76:c8:95:4f:f0:5f:af:e9:0e:50:c9:b9:7e:7e:cb:af:74:69:
6b:33:63:db:51:7d:de:a1:48:14:72:27:32:5c:15:7e:f0:d0:
41:42:8a:ac:80:c8:35:d6:4d:df:3b:66:ae:79:2a:5f:45:21:
09:48:ee:d2:38:9e:66:79:44:c3:68:5f:67:54:44:34:1e:d1:
b9:29:b9:9b:c3:42:11:ce:47:6b:53:a4:a1:fd:9b:d8:4c:59:
68:3b:f9:68:31:ad:6b:31:d8:f6:39:5e:b1:f2:1f:60:9b:55:
48:ed:b4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:24 2025 by rpki-client