Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: NY82yrOeZ4K3u91DGzxnrrAhS1xjJZp7VPKNXtVnwiw=
Subject key identifier: A3:A1:CF:6B:39:DA:D4:D7:54:02:3F:FA:1E:26:5F:5A:D3:90:C8:0B
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 0194BC72ABD11C7937ADAFF8FC32F6612405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 32
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: 8jq0p19MSK/e6LWXiGU9bzyy43Jk8iPiS1G4CsmHSH0=)
2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:d1:1c:79:37:ad:af:f8:fc:32:f6:61:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=a3a1cf6b39dad4d754023ffa1e265f5ad390c80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:19:61:e6:ac:3d:fd:d6:d2:65:69:7b:73:
05:0d:0c:d2:f4:15:9c:ce:65:06:44:28:bc:9c:d7:
e5:9a:8c:aa:7f:d7:94:1f:bb:13:2c:7d:0b:f8:17:
b9:96:41:16:ba:d4:4a:16:10:70:d1:7a:47:d0:fb:
77:4c:4b:4a:23:4b:42:e1:c9:d1:db:de:c2:72:09:
7d:e6:b4:f8:6b:c2:2e:9c:ed:4c:9e:e2:ca:bf:39:
51:d8:60:9d:18:58:f6:da:1b:5b:39:3b:5b:c3:76:
8f:b4:67:a8:bd:cb:06:b1:c4:a4:7e:de:7d:9e:87:
4f:5a:85:5f:05:60:b1:54:92:2c:d2:4d:4d:6a:1c:
8d:30:66:53:2c:05:28:e2:05:fc:02:00:6a:f2:84:
89:c0:6b:e7:45:30:21:70:22:54:df:8f:92:32:c0:
f3:8f:98:e9:c4:eb:e6:64:11:97:f7:b0:ea:76:d7:
a1:5e:d8:ef:81:06:db:63:1c:7f:0b:4b:ae:5a:cf:
53:e8:a8:09:86:3e:3e:66:9d:fb:35:c9:d5:69:e1:
aa:b7:45:8e:b8:0b:67:b4:ca:50:0a:42:07:90:a7:
c4:af:a8:c1:77:e7:f0:92:9d:67:7a:a3:48:13:bd:
92:81:7d:4c:56:d9:ee:a0:c3:d4:f0:eb:81:1e:0e:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:CF:6B:39:DA:D4:D7:54:02:3F:FA:1E:26:5F:5A:D3:90:C8:0B
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:24:81:6f:52:2c:66:70:40:e1:2e:51:f8:33:5e:15:b0:
40:51:c1:ce:1c:fa:fd:4f:b2:f8:3e:d2:f9:60:4c:c0:8a:be:
1e:ad:9d:09:61:89:74:46:a5:6e:14:48:e5:ad:5e:19:8a:c5:
fc:38:41:64:d6:e9:03:53:e6:05:09:61:1f:33:68:5a:49:5c:
cc:95:32:85:05:2f:2a:53:df:c5:ad:51:dd:8b:c2:f1:e2:0e:
6d:b2:69:1b:72:bd:49:3f:da:63:8a:86:46:ca:c4:5d:a4:dd:
5a:05:7f:ca:28:1b:05:09:ba:2c:79:6d:7f:0f:ba:80:7c:da:
f4:83:b1:7c:3a:c1:19:dc:57:38:44:ee:d1:49:f0:3a:e8:c8:
5f:29:79:73:3a:01:4b:2a:22:8d:bf:cc:20:e2:36:2c:7a:7f:
24:16:70:d7:14:87:27:ba:8a:d1:d1:49:e6:09:20:4c:56:b5:
d4:2e:76:af:78:5a:66:2c:a0:e3:88:96:ad:6a:da:ae:18:19:
fd:b1:40:c2:d6:d4:f9:e8:d6:9b:28:e5:15:a7:ce:c8:87:60:
79:fa:76:96:25:76:38:65:6b:b0:d8:b4:75:65:03:89:74:80:
aa:e9:83:01:25:58:b1:27:a6:bb:2c:6a:5d:64:cc:77:d5:2f:
95:4d:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:04 2025 by rpki-client