Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: 7+HsSF8b9dntVR0qTGxmEGHozR2th4IAs+xSQO7uqwI=
Subject key identifier: 41:56:43:8B:21:00:2B:E4:6E:7E:5D:DA:37:90:B1:FB:FC:1D:F5:7D
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 0194BC3C6ED33D81EA1284A4AFE13FC805D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: 7aQeKGn6l1H/7Z9OdtUwaKBk7LFEwYmvck+9CrkFLKo=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:d3:3d:81:ea:12:84:a4:af:e1:3f:c8:05:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=4156438b21002be46e7e5dda3790b1fbfc1df57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:d2:82:cb:2a:28:18:bf:16:25:da:59:36:
d3:17:26:16:9d:2d:1f:d2:9c:bd:06:03:39:42:6f:
ce:bb:1e:4e:d4:ce:04:84:61:95:6b:6c:8f:3e:4c:
ea:55:f8:7a:79:1d:45:5d:11:e2:20:95:0d:40:46:
16:f7:af:02:00:7a:7a:58:d2:28:6c:13:bf:fe:9c:
b9:25:8c:e6:9c:97:6e:32:20:6c:0f:95:c3:45:0c:
0d:8c:aa:69:ac:e3:c2:7f:a1:e1:43:f7:4c:62:08:
af:a7:bf:27:28:f9:d8:4d:bd:fc:84:f2:fd:65:e7:
0c:93:87:d9:b6:95:01:4f:2c:60:bc:88:8a:86:83:
cc:7b:fb:41:c3:ad:56:0b:f3:eb:e8:59:21:7a:c3:
6e:cc:a4:ab:c4:f6:b7:41:c7:82:bf:59:92:fd:7b:
68:b6:ec:9e:22:84:ad:8d:0d:db:a4:1d:7c:4e:e5:
b9:09:37:de:c5:10:53:ac:dc:b3:83:ef:81:49:f6:
0a:f8:77:36:3b:ec:fc:37:73:5f:8a:ef:87:bc:d0:
55:36:ad:a0:a6:e2:42:52:3c:01:35:4c:c6:aa:c2:
88:42:3f:3a:b6:da:fb:d7:44:1f:f9:57:7c:77:af:
a0:de:5c:5c:76:14:d5:4b:32:46:a9:52:b5:8f:d0:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:56:43:8B:21:00:2B:E4:6E:7E:5D:DA:37:90:B1:FB:FC:1D:F5:7D
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9e:51:82:f1:9a:49:1e:ef:cc:4d:6a:d9:42:04:d8:38:75:
11:87:de:51:f8:b3:97:f6:38:86:a7:c0:46:35:00:ef:dc:76:
1d:e6:d9:9f:66:5d:25:e9:3f:76:a5:37:ab:09:fd:6a:d0:7a:
88:e6:bf:c9:b7:3f:3d:88:97:7f:90:b0:98:d9:9e:63:d5:40:
48:3d:be:77:38:a9:b7:cb:ef:85:44:3d:6b:65:d3:47:62:6f:
7d:75:0e:eb:b3:38:ad:ec:c8:b3:7c:c9:ea:42:bb:8f:41:15:
fe:1a:80:39:49:68:29:68:eb:f7:a1:f6:78:92:3a:b4:ba:ec:
88:01:70:d4:77:95:34:e1:1b:a8:64:e9:56:0e:5c:41:3f:9c:
1f:7a:3e:53:0e:dd:09:eb:0d:a5:f0:61:6c:92:1c:5c:a0:13:
0b:a3:b8:be:1c:bb:f1:9c:00:82:24:a7:f7:6b:18:a9:88:37:
13:c4:24:e1:bb:46:8b:a7:20:ea:1f:a5:14:47:5e:c1:4b:8b:
6a:4f:77:d0:3b:34:34:83:c3:9b:d4:48:e1:3e:61:bf:c1:6a:
50:4c:55:fa:29:00:8e:09:38:67:58:8e:fe:bc:22:fc:ec:60:
3a:f2:93:99:81:6f:c2:2c:29:91:b6:35:c8:8a:db:fc:b7:15:
88:9a:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:59:28 2025 by rpki-client