Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier: ef1rSlrlaEo8TDQl0Q+Wc90EgX84ft9rAIlAmUkwFrA=
Subject key identifier: 09:15:44:42:D1:F2:A9:0A:62:A8:4F:A6:9C:AE:0A:49:5B:89:20:8D
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer: /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial: 0194BD8559C50E593D925D100D27EDB204E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number: 0749
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: 4AKMrAsFEiiYQM4Ynn2PbKKjTn/B4oUtVzbN1t2YoFk=)
2: bhwBYoazvA5A_Z_cE9R34ToOWGg.roa (hash: sma7MnYwGc+h3WkyXXW6543+L5js/BDpTSkKMtbWDZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:c5:0e:59:3d:92:5d:10:0d:27:ed:b2:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=09154442d1f2a90a62a84fa69cae0a495b89208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:5d:82:ac:75:61:75:9f:8a:73:0e:ed:b1:
32:59:96:27:2f:10:8e:d7:c5:fc:62:74:7f:92:08:
35:3b:b7:35:1d:45:d7:bc:59:42:c3:e9:b6:10:dc:
f1:5d:7d:40:63:e3:c6:c2:00:5e:8f:28:36:c6:25:
2e:a9:7f:70:45:82:97:c8:61:98:3f:72:cb:2f:81:
85:94:7a:d4:b8:79:8b:fb:7d:39:5d:d7:42:cd:07:
bd:9b:4a:fc:dc:37:82:cf:39:00:9d:bb:c9:26:40:
9f:36:ba:f5:0a:7a:b1:35:e7:df:de:3b:60:98:4a:
61:a4:47:a4:61:93:bd:ca:80:44:89:0f:d0:c9:aa:
82:9e:45:2c:bf:4a:59:c6:88:a7:e1:c2:5d:3a:7f:
24:53:ba:8c:54:bd:9c:02:fc:d0:e7:da:25:15:40:
e3:c3:72:b0:e8:d6:ec:94:89:13:bc:a3:87:0f:51:
b6:34:34:f0:b3:fe:cd:fe:3c:b4:68:16:77:d5:b9:
30:7f:33:74:b7:2a:e5:80:5e:48:7d:e4:b9:06:4d:
2f:39:5d:58:a8:a3:58:03:b8:21:f3:e9:74:dc:6d:
9a:1a:41:bf:f6:b6:fe:e9:4b:8f:da:e4:2d:8f:07:
ac:42:3f:f4:e6:68:ea:65:cd:66:7b:e8:3d:6a:93:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:44:42:D1:F2:A9:0A:62:A8:4F:A6:9C:AE:0A:49:5B:89:20:8D
X509v3 Authority Key Identifier:
keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:69:b2:2c:fa:bb:de:42:47:d7:e7:70:d7:fc:6c:18:0f:
36:75:dd:8f:3c:a7:46:44:5f:67:15:8b:63:4f:8f:7d:e6:b4:
ae:d1:d9:60:b7:60:1d:7f:c1:1d:1f:d9:69:dc:61:9b:4f:42:
3f:5b:90:ce:34:1a:ae:58:e2:39:e6:72:61:48:08:24:5f:e5:
35:48:4f:a3:fc:81:2e:d8:ea:da:b7:23:ba:3d:d7:f7:76:74:
1d:2c:af:17:f2:87:62:ff:1f:45:4c:38:08:c0:da:2c:89:9a:
b6:61:c4:4d:d8:63:6d:e8:8b:c1:8f:8d:2e:a8:2f:fb:cc:be:
4d:ca:fd:ef:b9:ac:4e:2d:92:bb:dc:67:19:a3:03:0c:5a:e9:
5b:a3:fa:7e:f3:8c:83:e6:36:3b:06:b0:fe:40:d0:61:20:85:
10:5b:7a:51:fa:03:1b:59:21:1f:87:7d:73:ae:a9:1b:78:e3:
78:ec:93:c2:59:a4:2d:38:c2:d7:2d:3f:85:47:2b:39:19:fb:
ba:1d:ef:bf:cd:67:df:a7:a0:c5:1d:bc:1e:54:0b:ba:dc:35:
61:50:99:8b:29:21:ed:02:02:b9:20:73:c3:ac:14:94:6d:cf:
92:5b:53:cc:96:4a:f7:d6:f5:81:14:4c:e0:b5:54:ab:e3:bd:
c0:a2:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:05 2025 by rpki-client