Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
File: rXz7zh1tOmok8lZSBl0xV1go7bU.mft (raw, json)
Hash identifier: gWkje0PtRQ42tId+kaLb6ydbp03ISqA7A2BB24FuGos=
Subject key identifier: B8:D4:73:81:BD:1F:B7:0E:84:90:5D:69:6F:16:0C:04:E9:C1:9B:FE
Authority key identifier: AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
Certificate issuer: /CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Certificate serial: 0194BD85B0F3547FA9CE8F4A98CCE5C7D545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
Manifest number: 0B3C
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: Im3NuoFQdX7egdBojqG76hMiXq0.roa (hash: MBZCzXbY6/6xAtTJ9sYOEhNyw2Jnz8TgfEJHylhcfdM=)
2: rXz7zh1tOmok8lZSBl0xV1go7bU.crl (hash: 8L3Y7GiP6a9zGMatDJ7wl5IK6pBlTnF+n/zVr/Zi1BQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:f3:54:7f:a9:ce:8f:4a:98:cc:e5:c7:d5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7cfbce1d6d3a6a24f25652065d31575828edb5
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=b8d47381bd1fb70e84905d696f160c04e9c19bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:89:cf:e0:cb:c1:a4:9c:1c:17:be:04:34:
ca:3c:01:fd:f7:7a:6f:81:c1:91:5a:59:d5:fe:8f:
a4:2a:e4:6d:dd:56:be:e8:56:90:8e:87:7e:d4:ac:
48:20:f5:fb:7a:a7:b3:72:29:a2:7c:ba:6a:f0:de:
f8:69:ff:c5:ae:43:2c:2e:4c:41:fe:06:6e:d2:c0:
84:1f:5b:b8:12:65:18:86:3c:59:5b:9c:a4:bd:90:
74:4f:25:2f:70:05:e3:83:5f:d9:ef:65:62:35:b4:
bd:00:02:fd:4e:7d:eb:4d:96:76:e8:24:cd:f1:73:
e6:45:43:d5:ec:b3:28:e0:49:77:7f:26:40:c7:9a:
2b:8a:b0:35:47:14:eb:d1:ba:fe:24:fb:2c:67:80:
2b:40:ba:78:1e:da:f3:5c:9b:92:40:81:1a:c8:e3:
4d:09:b2:31:73:5e:d2:8d:46:21:da:66:ed:4b:27:
dc:d2:b2:9c:0f:be:ce:17:50:30:10:f7:82:45:e4:
41:64:78:2a:6d:f9:a7:d5:d5:ca:03:3c:9f:15:83:
5d:c3:56:dc:d9:92:95:fa:3a:fc:d8:94:59:95:3d:
58:67:e9:ea:fa:f6:f0:0d:0a:b2:1b:68:b2:c2:99:
aa:f5:73:a9:1e:33:fb:f9:b4:68:b7:c7:3a:81:71:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:73:81:BD:1F:B7:0E:84:90:5D:69:6F:16:0C:04:E9:C1:9B:FE
X509v3 Authority Key Identifier:
keyid:AD:7C:FB:CE:1D:6D:3A:6A:24:F2:56:52:06:5D:31:57:58:28:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXz7zh1tOmok8lZSBl0xV1go7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/114340-2c70-41fc-abe7-2fa7c9b111b1/1/rXz7zh1tOmok8lZSBl0xV1go7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:f9:e5:1a:88:6a:91:78:e1:f8:3d:db:02:cd:3b:76:f1:
c1:00:a0:e8:1d:e7:95:fe:08:30:77:96:48:64:99:5e:16:b4:
34:d0:11:50:7b:73:ea:5d:96:2a:62:53:99:36:4a:be:a4:69:
1d:52:64:2b:83:84:1f:07:53:4d:5e:85:5b:88:b7:c6:4a:5d:
33:af:1c:b8:f1:46:61:1b:f4:fb:6c:8b:e3:7d:c6:7a:da:68:
7e:70:8d:26:e1:b8:1a:dd:61:77:df:dc:82:af:6d:3f:09:b2:
05:bf:a3:f5:c2:fe:9b:72:42:fa:8a:3b:3d:34:46:68:22:70:
95:3b:49:b2:71:05:8f:1f:88:29:dd:c4:c3:5b:9b:bb:14:87:
5b:1b:a5:8a:c7:7b:81:6a:93:cf:cd:c8:d7:f7:77:12:fc:8a:
5d:d6:e6:09:6b:34:62:7c:d0:5f:43:d0:ad:cc:e8:25:26:d2:
f0:be:ab:1c:f5:09:0c:0f:c4:9f:09:38:64:4a:49:05:06:f4:
3f:49:25:11:bb:26:72:20:8c:50:4a:66:27:2e:a9:24:99:5a:
ef:43:f3:38:fb:7c:ec:20:b5:52:c6:a6:35:4e:31:c4:80:1d:
da:0c:16:ef:da:c6:12:63:09:30:93:80:2b:b1:8f:19:59:53:
aa:90:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:11 2025 by rpki-client