Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
File: 0j94Nzy5ZlTQMGBkaS78SudxXxc.mft (raw, json)
Hash identifier: uO2ThwEdKd0hvlYXohwJ6INMoeUIJ6IXZBlQS/MebOE=
Subject key identifier: A0:29:62:F1:71:89:3E:11:01:29:E2:D6:34:26:EF:8C:23:89:5B:AC
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Certificate issuer: /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial: 0194BD853EB5818CA12E35457B99719613AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
Manifest number: 08BB
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: 0j94Nzy5ZlTQMGBkaS78SudxXxc.crl (hash: wyKA6ua8SMbbRGIGYcOq0Q9jidZIG3zPWSb+F5hft2k=)
2: qFkl9TmjJ7JQHzPlKEWAsMr-VIk.roa (hash: bNPdsQRy04HtNn/c+rfGq3WnL/GPuEnpubOXCkWKru8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3e:b5:81:8c:a1:2e:35:45:7b:99:71:96:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=a02962f171893e110129e2d63426ef8c23895bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:ac:39:1b:08:f7:98:af:c7:13:94:51:58:
3e:e9:e1:37:3d:17:c4:ec:d0:24:56:31:1c:aa:6a:
e2:0e:63:0f:f1:68:90:1b:70:a6:b4:61:c0:fe:07:
9c:e8:6d:bd:41:1f:ec:3c:d8:db:85:28:51:db:da:
c6:61:a4:d5:c3:19:a9:43:00:9d:66:9e:42:ad:ec:
8a:c6:9d:12:79:49:7a:b4:ac:6a:f7:44:43:7a:54:
82:66:2f:4f:38:9d:ec:73:d1:f8:c8:01:27:e1:c2:
8a:c5:3b:dc:ea:17:69:12:35:a4:d7:4d:df:45:31:
a5:7a:36:97:3b:24:9b:08:cc:64:59:4b:12:37:47:
a3:f0:bd:61:0f:d6:70:1b:75:28:6b:88:30:af:3b:
76:19:20:0f:bd:c5:cd:fa:27:80:bd:3e:f9:32:bf:
6e:6a:fd:2f:ff:77:86:56:5d:ba:8a:07:36:72:65:
4d:e6:b1:6f:ab:1e:ac:72:e0:81:50:4b:84:69:c9:
0f:9a:b7:ee:f1:68:89:08:72:c9:ab:ab:6f:fe:ed:
96:4e:53:af:8c:a3:d9:4f:6d:a5:66:cb:bc:45:bb:
1a:ba:85:da:db:99:4f:86:52:2a:c8:67:2e:a5:11:
63:d5:9b:be:32:bf:8b:4f:94:a5:7f:bb:b2:c9:2f:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:62:F1:71:89:3E:11:01:29:E2:D6:34:26:EF:8C:23:89:5B:AC
X509v3 Authority Key Identifier:
keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:72:04:26:a7:e3:e0:8f:c2:38:e1:d2:9a:9a:73:2f:0b:41:
37:fe:77:eb:35:d4:d0:39:21:37:c0:3a:79:0c:cd:a7:85:f8:
f3:8b:47:0d:61:97:e5:2d:39:e7:a5:7f:3a:64:55:2d:9e:ca:
a2:09:04:ee:51:31:d7:3c:a3:79:58:d0:1c:13:2d:dd:4a:6f:
1e:f5:92:5d:ff:35:a8:81:4d:c6:d1:44:1d:b6:b2:c6:ab:67:
cb:e9:ef:6f:2b:de:dd:bd:7d:20:b0:cc:1f:f9:05:c7:cc:1d:
f2:35:be:97:f9:5d:83:ec:d8:7a:74:2f:e7:b3:d7:da:3f:52:
90:ab:45:02:29:4a:ab:21:a9:dc:c4:c9:13:1b:41:cd:e2:e9:
c8:00:6c:74:ea:2a:59:fd:42:6b:87:d6:a2:7b:ae:7a:37:5c:
d0:40:7e:fd:50:02:f3:d3:a8:86:cb:23:e9:e0:0a:e5:ae:d5:
c2:d9:4b:ab:9e:f4:45:4f:d2:4d:e2:bf:63:43:97:78:cf:11:
d3:b3:5a:04:10:9d:5f:42:d3:05:81:92:94:35:ec:32:9c:eb:
1d:2e:f9:df:63:c9:56:00:8b:75:95:f6:a0:40:da:21:eb:db:
68:d5:51:b8:44:03:12:0a:91:b6:72:f1:04:56:1b:a6:2b:b8:
a2:48:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:29 2025 by rpki-client