Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json)
Hash identifier: aS3MkKO41blirLSNZIwtdIbSjs6wKwUOluC4C9GDEgw=
Subject key identifier: 20:55:18:64:69:D9:65:8D:5D:89:E6:18:24:11:58:0C:64:F1:7F:7B
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 0194BC3BE7A8F984CB9B08B50E87BF97F000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
Manifest number: 0B0D
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: zBUW+haomW3bOrvvGXHhMK5Sc0C+zAK7hshizq5FfoM=)
2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e7:a8:f9:84:cb:9b:08:b5:0e:87:bf:97:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=2055186469d9658d5d89e6182411580c64f17f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:c0:cf:54:82:bb:6a:d6:2b:95:55:07:72:
06:b4:4f:21:4e:6d:0f:ba:fa:d4:f9:5c:d8:87:54:
fd:04:11:ad:ce:f2:a7:80:fb:54:c8:b3:9a:9e:b2:
9f:68:71:a9:89:95:ca:ab:6e:ba:83:b0:8a:89:cd:
51:45:47:29:59:b4:a5:09:03:6d:c9:b8:81:76:9a:
46:a2:5a:cc:3a:1a:92:85:cc:dd:1e:b5:c2:c5:a3:
f2:77:ee:aa:34:7f:de:ec:3e:f9:9f:ae:34:2e:19:
23:10:3f:c7:47:79:3b:07:02:8e:6d:90:54:d8:a6:
69:47:86:32:53:58:40:59:6b:3f:e9:41:f1:91:88:
ff:2d:5a:8f:c9:b1:49:a0:ac:c1:48:82:fb:ae:84:
13:bb:a8:45:2d:ef:99:d5:8c:1c:85:ac:27:23:62:
66:67:50:60:fc:ce:68:cb:85:68:c7:29:64:2c:2c:
05:8a:ba:63:34:00:00:87:96:ff:5b:0b:a7:d4:9f:
77:4a:8b:9e:86:56:63:47:49:64:03:5e:81:c5:d1:
bc:94:eb:02:3f:9e:a6:cf:20:7b:c7:62:04:40:b5:
fe:51:b6:fd:8e:10:1e:49:38:1b:f5:b7:4c:68:39:
df:4d:07:f0:72:ba:09:f8:86:2f:d2:2b:d2:b3:f5:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:55:18:64:69:D9:65:8D:5D:89:E6:18:24:11:58:0C:64:F1:7F:7B
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:84:df:59:4e:ad:4e:96:56:92:6c:f3:b2:bc:6a:ce:0c:
9f:1d:89:5a:26:6d:b1:e1:a4:e3:89:12:d9:a0:c5:0a:68:9b:
e9:0d:a8:44:cf:46:37:32:67:09:70:86:ad:98:b6:ca:af:28:
67:45:62:bd:45:38:94:6c:4d:e8:70:05:dc:bc:2b:9f:93:d8:
b1:af:4e:03:02:56:59:a5:cd:3d:3b:93:b1:0c:44:5e:9f:9f:
ef:6f:2e:1a:a1:b8:4e:2b:29:39:98:50:92:45:ad:4d:30:bf:
e0:32:a1:6f:54:8f:e1:08:d2:55:de:18:58:27:8f:00:f3:55:
44:72:e3:f6:ae:ce:32:5d:7b:d9:37:db:65:6a:bd:16:79:22:
c9:63:10:63:4b:bf:dc:e2:fc:f6:6c:ba:b5:83:1c:05:18:22:
52:f4:01:66:ca:f7:90:38:69:88:21:dc:b9:6f:64:89:1e:5b:
42:1a:2d:c0:e4:45:63:6d:e5:63:f1:73:e9:7c:62:a0:a9:e9:
f9:96:ff:54:0b:40:0b:55:3d:e9:0d:0a:2e:90:bb:1d:dc:10:
11:7b:e4:fb:86:ac:d0:3e:0c:0e:6a:7d:c7:69:a0:85:40:67:
93:59:73:0f:1c:9c:8a:ef:ea:7f:92:9f:3c:d1:f8:8d:87:83:
f2:f1:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:20 2025 by rpki-client