Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: 3xZRUNnw4XJYz3TFw/CxjeKSw+kxgpme7MvqpLB79GM=
Subject key identifier: 09:88:31:02:2F:9A:97:ED:62:20:9B:65:58:3A:B1:F9:EB:70:6B:54
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 0194BD8528CE18E75556756D6173A7A1D7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa (hash: bmhEBNk6LesEwcu8xwGODwFl5oPTmJlYZFKxsnvzgRU=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: TdqBnfMdppEIssauRo7L8eRifpDPTTVA5dtarDhL5Yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:28:ce:18:e7:55:56:75:6d:61:73:a7:a1:d7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=098831022f9a97ed62209b65583ab1f9eb706b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:c7:11:af:24:0d:c4:46:f4:d1:f2:90:39:
0a:30:8e:63:57:f9:a5:66:e1:17:4d:83:f1:e1:8a:
bc:85:0d:aa:1d:79:38:e7:04:d5:96:57:2d:a8:89:
38:ae:29:09:5c:f6:fb:6f:dd:81:d7:e7:74:45:14:
0f:1d:3f:2c:3e:d3:c0:ee:13:ee:d5:28:c1:c4:fc:
39:22:b7:9f:bd:bc:33:9d:79:68:f1:bd:15:40:d1:
93:7a:6d:0a:c2:20:bb:fd:a4:88:94:22:c1:9d:98:
88:4c:ae:32:5c:b6:0f:09:e0:ad:06:a3:44:e2:f0:
8f:ad:bf:ef:00:41:13:9a:7d:2b:ab:35:a4:78:d3:
70:0e:e9:41:0c:2f:52:05:4d:68:be:54:39:2c:c7:
ff:ea:42:08:dc:10:b1:32:1b:b0:8e:0d:19:a4:eb:
79:a7:49:70:fa:8c:fe:98:02:a3:2c:16:a2:b8:2d:
40:69:6d:e8:47:f4:51:dd:b5:b6:64:90:0d:5c:9b:
cf:79:c0:35:dc:2f:72:62:a6:5a:bd:93:97:3e:7e:
c6:3e:1a:39:10:01:15:60:d8:dc:28:c2:3a:7b:8b:
15:85:a2:0b:df:d2:d9:3d:d0:6b:d9:6e:b5:8f:6a:
35:47:fe:00:49:a4:4d:24:90:06:68:fb:92:c4:cc:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:88:31:02:2F:9A:97:ED:62:20:9B:65:58:3A:B1:F9:EB:70:6B:54
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5f:7a:e2:ae:fd:84:73:94:4f:2e:b1:5a:38:cb:b7:7f:35:
0c:8e:b3:61:68:bb:4b:00:82:8d:72:2e:69:e6:ee:3d:fe:5b:
2e:2c:b9:d1:f9:d7:3c:cd:cf:46:0e:ab:33:81:81:c0:ae:d6:
3f:fd:09:64:14:ec:ad:ed:fb:87:09:4d:3f:60:9a:43:dd:b2:
7f:aa:dc:ee:5e:77:1c:65:b3:3d:46:d3:eb:36:fe:ec:88:1f:
bb:06:22:e6:9f:51:94:4a:f3:21:3b:3f:ae:b9:bf:e6:93:9a:
7d:66:8d:c7:e0:9d:14:d3:ec:35:19:29:21:86:33:31:71:a5:
5c:b4:ec:f5:d0:7f:52:7b:29:76:69:88:3f:8d:82:cf:75:bf:
7c:e7:e0:99:b2:17:f5:52:67:20:e5:ed:d2:6e:48:b9:66:e8:
b7:7b:56:6d:e0:39:26:47:1c:14:fa:24:48:23:12:ed:ee:20:
f8:9c:44:d0:83:1a:50:e4:2c:94:b7:a0:65:6f:69:e3:d9:5e:
90:db:3f:80:38:aa:ca:6c:2e:9c:cc:7f:c3:ec:b9:24:33:50:
1b:95:db:3d:73:da:c7:e7:31:62:40:44:4c:0f:e8:8c:90:c7:
3e:52:18:97:f8:ed:c4:83:ab:07:4b:e8:33:88:0d:ae:4c:c5:
a7:df:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:13 2025 by rpki-client