
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: Ia+yOnWQz6UrrqllkH/pX9xlDLIrPLCFw2LXJrp7jWU=
Subject key identifier: 46:E8:76:E8:29:B7:48:02:A9:FE:6E:FB:59:32:9F:7F:52:44:A7:D2
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 0194BD4EA24AC56BE8125DD5FEE62AAEE5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 03BF
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 0i_jhQqN2iNg5AEP50J1N6ocU14.roa (hash: dte6GhHBF0dhj/nHMGGQvO/MzVf6vGP1TT8x/x47jYs=)
2: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: Z24yhtQdLfxdOO2u4KbXZGSGeT/cSekf4UjGFSrgZz8=)
3: 0kZju71rKA8pbHkm-ekDk9Z07bk.roa (hash: b+ypJg6hcH6pKVJu6vyRpqtW+++IxkWsLRQNtn0KOrg=)
4: wH2BXhQbp4RbWEqazf0ETM0OAOI.roa (hash: WPj1rnPevOFK6Wz2Mo2etzdEIyu2IX1IvghxSjU5v1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:4a:c5:6b:e8:12:5d:d5:fe:e6:2a:ae:e5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=46e876e829b74802a9fe6efb59329f7f5244a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:a6:d9:ac:a3:b8:93:79:91:a7:28:b9:7b:
f7:26:f1:90:88:7a:0a:10:8b:be:cc:dc:4b:e3:11:
2a:44:bf:d8:79:ae:b0:ca:4c:50:71:b1:eb:5b:bf:
f0:d4:8f:57:a1:53:63:9d:90:e5:ad:21:98:b3:19:
63:bc:96:a5:2c:bf:32:e5:22:3b:18:da:b5:d2:a4:
b2:99:12:49:33:c5:d6:61:86:37:ca:3a:68:70:98:
b0:d7:12:f3:1d:eb:df:68:f1:08:0b:c0:ce:51:f0:
38:03:1f:19:9a:36:9d:4e:18:27:62:c1:b0:79:7f:
8a:1e:11:dc:07:f2:41:5c:e7:8e:94:20:45:03:d0:
af:92:2a:3b:b0:31:b3:22:85:54:56:c2:98:c2:a2:
ed:76:70:4a:f9:40:70:6d:0e:f7:55:62:1b:93:d0:
15:0a:c9:60:5c:b4:8d:ac:76:6b:45:05:6d:5d:1f:
b4:f2:66:07:04:01:41:ec:fa:9c:c9:de:a5:63:36:
18:f7:68:0d:4e:fd:eb:43:f4:b4:1a:4c:4a:7a:75:
c2:ad:40:61:7a:e8:1e:1b:32:49:88:70:54:6d:37:
1a:dd:3f:14:3d:75:4e:f9:55:1e:02:f1:30:e0:09:
75:42:1a:9c:45:80:4e:84:90:3b:b6:ac:74:68:0a:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:76:E8:29:B7:48:02:A9:FE:6E:FB:59:32:9F:7F:52:44:A7:D2
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:de:8e:80:5e:1b:e4:44:4c:f3:67:29:d9:a8:af:cf:63:34:
0f:68:e9:ef:2c:18:e7:4b:28:17:b7:11:e8:b9:4b:f6:a5:68:
2d:56:8a:f9:81:5e:8f:11:48:b1:9e:17:a2:b9:5c:53:ed:80:
30:0a:32:5e:d7:a0:ac:95:b1:99:e6:d8:24:3a:eb:09:b1:9a:
83:da:8c:32:c9:b9:fe:c7:7b:19:15:65:02:6e:03:38:e9:10:
96:ef:3a:1b:66:d2:6b:a2:df:05:dc:4e:08:6b:1e:0d:2a:2a:
20:b0:5b:80:b1:c5:f0:45:89:db:7e:62:20:e4:39:66:97:ba:
83:8e:b7:25:d1:96:5e:ec:78:c1:63:a3:2b:a2:f2:7d:dd:e8:
c9:b6:cc:12:c6:f1:c8:91:ed:fa:03:ef:af:1d:ca:6e:e8:14:
4d:4a:ad:3b:9a:82:ff:70:2c:46:11:79:51:a8:71:7b:df:ab:
e7:eb:89:e6:7b:6d:85:ee:c4:34:52:19:1b:2c:b4:f6:7e:e7:
c7:6e:b5:a5:18:8a:71:ea:10:53:83:4b:56:af:83:e7:91:5e:
5b:5d:b6:26:05:e6:95:e8:ae:69:e5:9c:c4:08:73:9a:54:3a:
11:01:f3:fd:64:65:90:48:5b:f9:87:16:ef:6a:86:22:47:50:
c1:3f:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:11 2025 by rpki-client