Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json)
Hash identifier: 6GUtOq0T9Wk4zF+gTz5PZl5ltloOKKxFRBlMNddefHw=
Subject key identifier: 74:9A:8F:42:6D:CA:E4:48:34:94:33:5F:7C:1C:A1:20:D4:DF:8B:24
Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Certificate serial: 0194BBCDCA1D464E430BF91D1D2BF2B3CBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
Manifest number: 0AFF
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: 7tMuSX146yWqM4uooD9YqidcWelxvlufzqSNE8xX0fo=)
2: LPCDu87vvEM5O8HyjWDakdHtl2E.roa (hash: Wurynnxc4HmLUHSiIQ2miFmjlyoy/berebBUDyFaz/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:1d:46:4e:43:0b:f9:1d:1d:2b:f2:b3:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=749a8f426dcae4483494335f7c1ca120d4df8b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:65:f9:c1:52:d1:57:c5:21:a3:30:a3:de:
72:5c:5e:13:cc:76:83:05:1b:0c:60:9c:6a:3f:a5:
50:d1:8f:df:06:b5:0f:36:a1:57:35:f5:8d:b1:2d:
d7:63:4d:92:bf:75:02:74:5b:22:36:3c:53:63:72:
af:45:d2:a1:6b:57:53:88:59:dd:d3:84:bd:3e:da:
91:7c:6c:61:8e:a9:16:76:8a:d3:c9:a3:29:3f:d4:
03:22:2b:29:63:8f:d3:ec:93:c0:da:5b:b4:9c:7c:
16:d5:dd:c9:bb:ec:34:21:84:fe:11:84:7f:91:14:
f9:15:25:a6:3f:01:34:0e:69:f9:69:50:8b:26:23:
c1:6a:85:10:8d:e3:f1:5c:05:a5:cf:59:c5:96:9b:
ff:a2:38:2f:13:b3:f1:27:0b:ad:81:47:f8:30:67:
d2:eb:0f:58:76:f8:a3:01:19:18:2a:6d:b7:a5:e9:
a5:f0:7e:09:c3:c3:e2:35:02:9f:13:78:03:d5:af:
df:b2:c5:c9:ad:8e:a5:ab:ad:5f:80:df:82:4f:be:
df:47:cb:83:38:2a:ab:58:08:80:0b:69:14:a6:6a:
86:25:5b:f0:0a:12:38:40:b8:c1:13:d6:6b:ae:48:
ab:05:c9:a1:9a:b0:c5:c2:21:48:2b:32:2f:b9:f4:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:8F:42:6D:CA:E4:48:34:94:33:5F:7C:1C:A1:20:D4:DF:8B:24
X509v3 Authority Key Identifier:
keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6d:16:63:f8:a0:fa:04:a4:80:71:8f:e3:91:cf:28:cc:23:
f9:ae:f3:2e:96:7f:c3:1a:e4:f2:10:82:85:63:aa:35:48:c2:
36:76:ba:33:18:f1:59:15:e2:41:16:a4:64:da:30:6b:30:f6:
b6:d7:4a:2d:67:27:a7:47:39:43:0b:28:dd:93:6e:de:2d:c1:
e5:7e:23:88:8a:2d:c1:7a:cc:2b:06:71:45:0b:7c:4e:23:08:
8c:66:d7:d0:1b:c7:e7:71:8c:fb:38:e4:4d:b1:ad:ce:45:51:
50:20:7d:15:83:ac:91:84:b0:f4:bb:2b:d3:6a:40:3f:f8:82:
56:14:dd:f9:92:4d:eb:96:eb:40:cb:30:a5:48:81:8e:cb:a2:
d5:02:31:23:23:a2:d6:71:5e:f4:08:35:62:bd:8b:87:23:1a:
34:a7:ce:2c:3c:e9:97:26:2d:b1:14:2a:3b:9d:b5:f7:5b:2e:
39:53:03:2a:f9:0d:12:a3:96:dc:63:8a:79:cb:90:ad:8e:e5:
5c:26:a8:4c:f2:e5:e9:83:52:c2:eb:a7:05:db:52:dc:7e:cb:
91:77:97:00:1f:53:1a:2e:5b:1a:7c:63:72:df:b3:0e:f6:62:
f7:94:81:7e:16:1a:3a:72:22:20:71:38:54:93:17:3d:ab:49:
94:4b:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:48 2025 by rpki-client