Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File: 0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier: 7jEfO9Hv+19ywXtuHLCvRw/A9uk4QE6V6HURV6PKXfk=
Subject key identifier: 83:DB:53:D6:E2:77:0C:1A:49:1E:77:4F:92:49:A1:AC:15:96:01:A2
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer: /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial: 0194BCA9B152307A0E113E326F805A098003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number: 1304
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: NChC1bSUN61JOabI3YVI0NRIxMV7NZ3jMrmvscfnUmA=)
2: n6mO0jwfMCGtBTJz4z0BBFhaaaw.roa (hash: depvn6FAlXY00NO5eAYz1KXbUInLhBp+Jz+PGCqafeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b1:52:30:7a:0e:11:3e:32:6f:80:5a:09:80:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=83db53d6e2770c1a491e774f9249a1ac159601a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b6:1f:39:80:7f:02:24:d9:ce:6d:e2:2d:1e:
f2:fb:3a:cd:c7:d6:ad:b6:4a:a5:55:09:41:05:66:
3e:94:6e:d0:44:a0:97:64:d2:89:69:24:69:7d:66:
03:d2:ec:55:af:fa:6f:ce:06:ff:a2:a1:9b:91:92:
4c:10:39:1a:96:66:ed:2c:b1:db:75:1c:6c:50:26:
21:2b:48:f2:f0:17:52:4a:59:a6:4e:ab:72:07:50:
23:d6:a3:40:bd:38:60:49:99:88:17:19:f9:27:10:
f9:d2:40:cd:86:f0:37:bc:e6:b0:e1:43:cf:33:c1:
3e:66:32:c4:3a:3f:be:eb:7b:a8:2b:09:0a:3f:44:
31:1e:f0:4d:6c:38:f7:a8:b5:d2:ee:0d:ac:ed:81:
b5:e9:96:bc:84:3c:80:37:a6:eb:69:a2:e1:5e:44:
06:a9:b3:c7:c0:74:61:5d:c8:15:fb:a0:07:61:d3:
5f:52:62:f5:f9:60:de:d8:29:38:77:9a:c3:fe:5f:
e7:a4:71:6a:ff:3a:39:8a:df:a0:52:1c:da:88:c3:
34:d4:9a:1c:d7:6b:c8:04:23:45:e8:3c:7b:1f:69:
65:ff:45:7e:79:ea:5e:a4:2f:4e:68:ef:83:5f:aa:
49:74:2c:5f:94:01:cd:ca:ad:c9:cd:9b:d1:12:4d:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:53:D6:E2:77:0C:1A:49:1E:77:4F:92:49:A1:AC:15:96:01:A2
X509v3 Authority Key Identifier:
keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:64:3c:62:79:22:f7:f9:f3:3c:4f:1a:3a:be:9d:90:8c:e5:
ef:6e:50:68:f2:7f:fd:17:6f:41:df:d2:b4:5a:db:2c:22:fa:
df:5e:0e:97:c8:7a:29:9c:d2:d5:9a:99:fb:c2:d4:66:9c:ba:
63:a3:6a:85:bb:e3:23:c2:88:5b:91:b1:84:5f:c3:b2:f9:02:
0d:2f:ca:3f:cd:3d:a2:69:c5:6c:68:7f:28:bd:7a:8a:74:2b:
b6:92:b2:bb:07:35:4f:c3:6a:8f:9a:11:72:bd:3b:dd:01:42:
8b:7b:90:1d:70:3e:21:f5:2f:f6:61:19:fb:bd:83:fd:61:b3:
fe:9b:cc:6d:72:7a:22:43:61:09:60:0e:ee:5e:57:d7:b7:e1:
6f:4f:74:d6:7f:74:db:10:49:94:98:fa:4b:72:58:3b:c3:aa:
90:85:21:ef:ef:89:23:90:dd:72:21:cc:ca:ed:05:17:07:d4:
a7:74:a1:89:09:78:99:24:82:f2:be:9d:2e:21:c7:ca:c2:74:
1c:b4:e4:d7:63:48:42:f4:d4:b2:4b:5b:16:57:8b:7f:96:2d:
52:42:b6:69:f3:37:5d:02:27:54:7e:c4:f3:f8:c0:bb:f9:10:
de:9f:26:ae:25:a7:81:d3:ed:cb:47:c1:c9:e9:27:2e:16:89:
bb:5a:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:49 2025 by rpki-client