Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier: wpYFwC5YOoilwDMa2cLYEjBtQqA10O1p2eQhhKIvTQE=
Subject key identifier: 80:5F:08:80:2B:95:13:8C:29:53:EE:0E:8B:A4:0A:2C:87:23:E3:CA
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 0194BC3C35DA18636090A4B1F1EBA3FE3299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number: 12D3
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: TnhbLpG6C04u0G53YbIQSNsShrZ2WUC61s71u1bDOAQ=)
2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:da:18:63:60:90:a4:b1:f1:eb:a3:fe:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=805f08802b95138c2953ee0e8ba40a2c8723e3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:5e:78:2c:ff:a3:95:d7:3a:4d:24:c6:95:
a1:c6:25:cb:89:c8:a5:bd:01:e7:d8:35:7d:2f:eb:
84:61:a1:71:9d:5b:29:cb:c5:65:4a:35:bb:91:cd:
82:72:05:02:be:60:33:21:01:52:84:ec:ca:66:cc:
74:0d:11:5c:67:e0:32:50:b8:4b:09:91:ba:ba:e5:
fe:97:ce:5d:fd:0e:2c:80:aa:17:9a:83:e6:09:70:
e4:18:62:dc:e6:31:e7:20:51:17:90:9d:f8:f5:ad:
f9:74:a5:4f:e2:e6:63:58:15:44:7a:5d:bb:8a:51:
50:21:4f:24:78:69:19:24:7a:85:7a:9b:91:c8:3a:
76:10:1f:47:88:8a:ef:5e:2b:a1:23:b0:54:08:83:
02:10:b9:1d:93:88:21:10:c6:dc:50:6b:10:5d:42:
a5:a0:b5:fb:71:01:6a:8b:1c:8c:48:3c:ce:b5:3a:
9a:38:53:7e:1e:aa:1b:b6:f7:60:d5:f0:52:ca:3c:
01:f2:9e:ae:c0:95:26:57:8a:82:e7:13:13:24:fa:
ad:35:d8:c0:d6:a6:c7:7f:bb:8b:b6:9c:b7:93:c0:
94:e6:d8:81:57:70:b3:ab:77:7e:11:32:6a:a0:99:
3a:eb:c0:e6:6c:5c:05:a4:32:2a:7e:26:a9:ad:37:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5F:08:80:2B:95:13:8C:29:53:EE:0E:8B:A4:0A:2C:87:23:E3:CA
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c1:c6:48:34:5f:2e:46:ca:95:00:6d:f2:8c:a9:5a:3d:f9:
1f:af:50:3d:69:11:4b:99:cb:af:c1:1c:47:93:a4:9b:35:50:
5c:14:2d:5e:ad:ee:28:b1:db:3c:ee:64:71:11:b0:cc:06:5f:
8c:0d:68:5f:45:8a:9c:8c:69:84:82:55:b1:92:45:99:76:2c:
18:d8:b3:ab:f4:48:f7:ad:e6:39:14:0e:69:77:60:91:23:ba:
f9:3e:36:0b:33:5f:32:b4:9f:92:a2:93:c4:23:02:f5:41:39:
45:18:b2:db:ff:15:a0:d1:d3:5e:47:79:79:28:de:55:f4:b3:
6a:98:6a:c3:24:96:e9:1b:f7:fc:6b:a2:cd:59:d5:13:a9:c8:
c0:64:aa:9c:20:c9:a1:65:15:98:6e:11:4a:ee:df:e7:6a:d1:
83:cc:af:0e:bc:7d:99:d0:7e:01:4c:35:03:42:ee:fa:7b:e3:
51:a5:39:d5:75:af:20:a3:f2:6a:f9:db:64:98:63:31:9a:b5:
aa:58:b6:e3:e0:c7:42:64:d9:72:b1:25:14:9e:f6:6b:d0:a4:
bb:be:2e:8f:1a:9e:8e:5a:ef:e1:3f:32:db:c8:98:3e:95:c6:
f7:e4:75:74:b1:73:24:53:a5:dd:f4:3a:4e:0b:81:2d:15:6b:
97:e3:4f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:10 2025 by rpki-client