Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: r42f4WdftTkdVYUY0fFeBuAFh7f+k2WGg97KyGYWX5g=
Subject key identifier: 41:39:E8:9F:0F:EC:1C:86:D4:B0:E2:A0:21:BA:D2:42:D6:31:D3:D8
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 0194BD85AFC241EBDA3CBF102CA998230236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0BB3
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: F8p-MOff4BMFWg-B9Guz4ZEuLBk.roa (hash: ji5R4jO8mdtbGpywEm6dtslezloLesmRTjhn5BcjRME=)
2: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: tnEOhlv0As/3fmgwI2UV9C10xvviQw5xfo3VuVVnT38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:c2:41:eb:da:3c:bf:10:2c:a9:98:23:02:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=4139e89f0fec1c86d4b0e2a021bad242d631d3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:f7:80:65:82:8c:bb:9b:3c:77:66:93:33:
d8:b7:75:8b:52:04:74:29:48:14:7c:c9:22:3a:3a:
8d:8f:d0:88:3f:14:80:bd:8e:ca:e8:cf:5a:cc:ac:
6e:40:9a:fa:64:3b:c2:2d:c9:48:4d:4d:cf:c0:39:
46:72:90:b1:b4:c2:39:ac:c2:3e:37:6a:4c:bc:d8:
5a:ed:6e:b6:08:48:75:89:d6:ca:09:bf:99:77:45:
f7:15:aa:d9:26:a2:47:2e:95:34:17:a6:be:d4:1c:
14:f6:56:24:9e:1a:b6:98:28:b6:c3:f7:23:7e:00:
e2:ca:75:89:ca:a4:ca:86:c3:06:94:46:70:89:9e:
42:26:bb:47:af:fc:9c:02:ae:1f:96:9c:5e:47:89:
ab:b5:93:04:a2:52:8a:bd:69:ed:4b:87:f0:02:2e:
99:ae:63:30:2a:72:69:6b:83:f0:96:3d:a5:8d:c3:
11:43:f4:ca:bb:4e:3f:59:70:df:3d:af:19:2a:56:
c9:6c:6e:17:80:29:dd:8c:87:ef:17:79:d6:f7:4e:
27:4f:09:d7:e9:42:18:da:3e:7a:3d:92:b5:2c:99:
94:cb:cc:de:1c:27:20:17:f3:70:85:b4:5e:9d:7e:
51:c1:e3:44:d7:55:10:fc:7e:8a:fd:fb:08:51:61:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:39:E8:9F:0F:EC:1C:86:D4:B0:E2:A0:21:BA:D2:42:D6:31:D3:D8
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:73:c1:5a:19:5b:0a:03:54:55:81:f3:2f:4b:99:4e:e4:
50:bc:f6:bf:f8:62:e9:41:6c:f5:8c:b8:51:5a:95:73:1d:62:
fc:8e:b2:6e:1d:60:3d:1b:d0:db:ec:a5:1f:5b:b6:7c:e4:e0:
53:ca:b3:26:87:89:3d:1f:02:8f:20:27:e4:4e:b2:d3:a6:12:
9b:00:8e:4d:1f:75:c8:94:2c:96:46:ec:cc:12:b4:f3:5b:0a:
51:7d:97:81:4b:41:18:b9:81:0c:5f:20:84:ff:47:b7:29:0b:
9d:94:ac:b8:a2:31:02:3d:a8:29:d8:bc:8f:32:f7:ad:50:8f:
54:92:d7:bc:d9:01:b2:5d:21:e5:ec:59:ec:d0:e3:67:4d:d1:
23:c7:bd:ab:00:36:70:79:41:fc:35:3b:1d:d1:f3:cc:cc:3f:
7c:28:d0:6e:50:94:87:40:bb:75:b5:30:70:e0:f6:03:0a:c7:
9f:7b:62:21:05:26:cc:c0:b3:9a:11:e1:ad:52:64:82:88:63:
46:8d:36:bd:84:61:88:7d:ae:43:57:9d:34:f2:72:0c:f2:6b:
c2:26:6d:7a:e1:ed:bc:ce:17:e9:6b:b0:99:1d:16:59:6c:d3:
47:f7:2f:1d:0e:97:7f:8b:c2:a0:51:3b:38:24:5e:ad:83:87:
ea:75:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:01 2025 by rpki-client