Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: N/crFu3zvBzcVDjWSd6EMfoLjm/UmvoACFhTM3znNtM=
Subject key identifier: CA:3F:CA:84:87:AF:9D:45:82:B4:6B:28:96:BA:06:F4:1A:51:3D:ED
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 0194BC04E4F82B9BDD5CE73F0835D6F26749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: gpnJyV9Ntyi8SQkxPsAkJglcmhJqOvShVJbDbQIHzY0=)
2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e4:f8:2b:9b:dd:5c:e7:3f:08:35:d6:f2:67:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=ca3fca8487af9d4582b46b2896ba06f41a513ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:93:1d:02:69:59:c3:df:df:6f:1e:8b:0b:
b3:eb:88:26:b3:18:35:e0:4c:5c:2a:1a:91:f0:a7:
37:a4:c1:4d:b2:86:dc:94:27:e2:d4:86:7f:eb:9b:
1b:ca:3c:ed:e5:e5:48:2c:d2:54:8f:2f:02:ef:99:
c6:48:b3:35:80:12:1d:89:cc:1a:c5:12:1f:72:b7:
c2:63:fc:e2:c7:5c:4d:89:b5:42:9a:b4:9c:1c:84:
35:e9:19:a4:b8:3d:f9:b5:9b:60:f8:c1:b1:7f:73:
c6:1e:c7:6d:e4:2c:24:fe:c0:a1:17:0c:1f:ca:7b:
a3:fc:d1:2c:f7:64:ed:c7:0e:31:b6:cd:2f:ad:54:
07:59:20:35:90:ea:e1:3d:b7:f4:5b:26:39:c5:65:
17:61:d4:74:90:35:0b:83:f0:e7:6d:00:cf:23:c2:
fa:08:b0:ad:61:3e:dd:c4:bd:0d:9d:ad:25:f9:fd:
c9:f9:71:0a:56:e9:18:bd:f0:9e:fc:92:6b:a2:8d:
04:22:37:b1:d3:e5:5c:82:8a:f4:c8:49:33:9e:c0:
c2:06:19:70:97:b7:65:e6:de:5e:63:0c:77:75:59:
85:d3:77:98:24:e3:d7:3a:06:f6:c4:a5:22:a6:f5:
19:e3:3d:fb:59:4a:dd:6c:e7:c1:6c:6a:2a:94:e8:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:CA:84:87:AF:9D:45:82:B4:6B:28:96:BA:06:F4:1A:51:3D:ED
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:ce:e9:e3:d7:c6:e9:4a:b9:af:d0:8d:e0:4a:74:e5:70:
c5:38:a2:33:ff:db:56:8a:5b:4b:cd:63:7f:9b:d3:58:f9:de:
e7:d3:eb:f4:17:a7:4c:cb:6e:cf:5b:f8:d2:15:ab:92:9a:c3:
84:06:94:9f:ca:ea:af:67:b2:28:1c:76:06:19:29:55:f9:e8:
8e:2d:1e:52:c9:7b:c6:cb:c8:3c:ef:33:ba:51:4b:d5:7f:9a:
d8:d6:96:78:fe:97:51:0d:47:3f:f5:8f:ff:2b:3f:86:df:54:
65:8d:73:0e:d2:92:c0:9d:d4:9e:d3:81:dc:48:e1:ff:b4:f4:
e3:86:44:4d:53:3c:f3:96:d5:f3:b7:c9:f3:ec:34:92:f3:79:
09:fe:cc:e3:78:7a:21:13:cf:65:56:74:7e:d3:3e:36:cc:85:
69:8e:b0:2f:cb:6d:b6:8f:88:6f:45:9f:2e:eb:70:37:9d:c6:
69:97:7d:d5:68:df:90:36:07:e2:cc:23:ad:17:98:df:75:3e:
1c:59:09:47:be:a6:a8:e6:cc:f3:17:5c:64:4d:5a:87:8d:2b:
ba:af:7c:24:5c:65:01:07:70:12:f5:e1:6c:a8:fc:5d:45:60:
a4:df:02:e6:5f:3b:43:a9:7f:41:e3:c6:0e:32:86:1c:23:bf:
67:55:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:11 2025 by rpki-client