Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: SncV/CIupPpVvstC9/6USezCSklC+ZjF6604H+e2X5g=
Subject key identifier: B3:01:91:18:6C:E2:14:D1:21:7A:64:46:E9:EC:3F:B3:3E:29:2C:C1
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 0194BCAA3C569AC22BCAB11A636F907B978E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 0ED4
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: NBNamrtKLMR1pTXXeIW8I3I7dPcpURON9TUmCpWXJLo=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:56:9a:c2:2b:ca:b1:1a:63:6f:90:7b:97:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=b30191186ce214d1217a6446e9ec3fb33e292cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:c5:00:24:75:76:90:53:c2:2f:a6:8d:27:
f6:1c:39:f8:d7:89:44:1f:47:fd:09:6a:16:67:b3:
19:46:40:a8:78:e1:00:21:6e:26:b1:8c:26:11:4d:
0d:28:9e:dd:e5:be:6b:56:1a:04:a4:fc:e3:10:f0:
d7:4f:8d:28:71:e0:fe:61:c1:3b:f8:71:ca:cf:73:
f8:ad:ae:9f:c5:05:c5:9a:70:88:32:cb:80:b5:77:
7f:73:a7:b1:83:33:88:bc:07:23:e4:67:1e:35:84:
f5:ad:06:5e:c0:cc:f1:6d:68:58:0b:72:ca:d5:2f:
06:0a:53:28:1f:8c:d3:ab:7b:44:7c:5c:fb:7a:27:
71:be:b5:90:9e:54:6f:48:77:8c:53:76:87:6b:82:
c6:21:6a:48:f0:e6:d4:db:01:8a:47:68:ef:a7:33:
d3:55:58:ee:83:ce:4f:b9:80:9e:88:20:a3:be:e4:
0d:11:44:f5:96:7c:3c:6b:b5:b3:38:47:14:75:d8:
94:cd:2f:10:2e:02:64:ae:71:ce:6a:81:d2:f9:a8:
4d:75:79:fa:3c:9b:3c:91:6c:7e:95:02:c9:19:8f:
92:58:3d:0c:0d:f9:88:a7:1f:ae:da:0a:e1:8e:b7:
be:9a:89:c9:de:e1:89:99:d4:d5:0a:af:d6:30:2c:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:91:18:6C:E2:14:D1:21:7A:64:46:E9:EC:3F:B3:3E:29:2C:C1
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:63:bb:5d:8e:29:e0:79:e4:6f:5f:0c:23:26:e5:be:73:24:
5d:e7:c1:4e:cc:83:66:55:8a:e2:f9:33:ff:fe:46:93:ce:3c:
40:ca:52:ec:78:ff:ec:cf:70:81:e7:7f:f9:6c:28:37:48:09:
c1:66:92:28:57:2f:d8:c2:e7:2b:d8:95:ee:a8:c2:64:53:63:
6a:a3:d4:b8:b5:30:8a:02:7f:42:ca:69:45:65:e7:80:6c:4a:
5f:74:bb:ef:0c:38:f9:68:2f:d0:7c:af:0f:95:d2:62:67:ab:
d8:69:cf:57:fd:d9:a5:9c:0e:fe:4b:a4:e3:99:2e:75:d6:a8:
19:54:1d:df:73:e6:d9:fc:65:57:8b:f9:6e:c5:bb:3c:0e:56:
77:82:05:52:7c:15:bc:ae:1d:fc:0a:84:ce:e0:25:bf:5a:0c:
b2:32:3b:3e:89:e2:e3:32:01:d4:a4:db:24:0f:38:27:c8:4e:
f8:d6:8a:55:21:bd:69:3e:ca:8f:b4:a9:70:c8:e8:bf:1d:2c:
48:59:22:a8:c6:c0:81:67:ce:88:37:af:ad:2b:02:23:d0:b9:
9b:e1:6b:07:87:ef:e6:0b:f5:0f:32:93:28:37:88:73:49:95:
03:29:23:7a:01:d6:bd:76:bc:89:89:74:75:a4:7f:e7:cf:7b:
55:9b:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:47 2025 by rpki-client