Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: A/rzmLqaP68BZJ1HsCyI+pfodkbwo4Mx8CO10mXTvqg=
Subject key identifier: 77:D9:55:D6:1C:31:3A:24:BA:67:5C:1F:C5:6A:4D:F4:9C:CB:30:8C
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 0194BC72B6D987A343CFC08613E018EE9223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: LAwu6DQrP16E4P4iuAWrqMADMsC4EV0cGBBk59Ta+S4=)
2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b6:d9:87:a3:43:cf:c0:86:13:e0:18:ee:92:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=77d955d61c313a24ba675c1fc56a4df49ccb308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:7d:73:2e:9d:c0:d7:cd:3a:dc:fd:d5:30:
01:2f:97:f0:a4:08:fb:7f:97:85:f0:3a:3f:b0:e2:
18:d6:fa:8e:96:04:64:d2:37:99:0c:f1:12:0b:3a:
29:22:d9:e8:4e:59:17:57:d4:58:f7:3e:cf:bd:3f:
50:c3:bc:1c:5c:64:19:e3:b7:85:79:26:24:10:5d:
7f:12:7f:0a:c8:a0:f5:6b:d4:bf:50:55:a1:30:12:
7e:b6:58:f8:18:ce:9c:8a:d9:64:c3:df:ae:08:c5:
20:29:36:4f:63:cf:65:f7:c3:37:a9:00:40:ef:e1:
e9:dc:4c:38:a9:8c:09:a9:0e:dc:dc:9a:7d:d5:d6:
ec:1c:4f:48:ef:b9:14:6a:7c:63:7b:11:55:e4:85:
f6:1c:53:d4:47:6e:a1:77:0f:96:c1:4e:18:42:46:
1e:29:50:6b:d2:ce:63:14:b3:a0:70:ba:9a:1e:d8:
49:e8:f4:d9:b9:d7:f5:34:d9:4e:d2:a5:32:c2:40:
ea:a5:be:f3:8e:fb:11:2e:e4:82:ac:85:59:fc:2c:
5b:7b:c4:25:7f:68:e6:c6:09:6d:c1:9c:97:f7:62:
35:fe:56:c1:68:7d:ad:c2:2e:e7:6b:77:d0:e0:bd:
eb:2e:e2:5d:bb:af:ce:01:86:74:e9:82:3b:6c:2a:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:55:D6:1C:31:3A:24:BA:67:5C:1F:C5:6A:4D:F4:9C:CB:30:8C
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:a2:8e:7a:27:c8:b8:29:84:6b:87:c2:34:30:45:30:d6:
ab:78:16:10:0d:5a:2b:fa:e8:b2:3b:07:c9:3a:39:54:05:71:
58:6e:57:c4:82:cc:95:98:14:d8:e6:f8:2f:f8:db:f6:e3:b9:
3b:a5:e7:c5:b4:26:3e:78:9b:80:12:03:16:a9:0c:9f:2c:82:
1b:49:c1:67:08:70:b1:85:56:ad:f1:0c:58:dc:40:12:7f:77:
dc:99:68:da:f6:4c:54:01:a3:0e:dd:42:48:58:47:32:f8:8b:
3b:1c:ba:10:43:56:5a:50:9d:1a:c6:43:81:06:cb:2d:39:8c:
c3:59:b6:f2:34:b3:ef:29:3d:cc:e7:4a:b9:b1:24:16:03:89:
83:cf:0a:b8:59:75:47:54:70:df:74:1f:23:d0:25:a2:55:43:
fc:ba:e2:d8:9e:63:bd:55:2b:a6:02:25:11:e9:04:27:9e:3b:
65:0f:f2:ed:06:c5:c0:0b:24:b9:ba:87:98:27:37:d0:4c:10:
02:5a:c3:3b:7f:8b:0d:07:ab:f8:0f:04:cc:d7:3b:69:97:a1:
55:3a:0d:7a:c2:da:3c:63:1e:0f:9e:3f:b0:3f:81:78:bf:93:
58:34:8a:fd:4a:5b:22:dc:10:90:49:8e:fa:3c:33:9b:fb:22:
f6:93:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client