Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: h/RNzQpvaBsAtNhzahGwZvcDSwNyVMzXfZey+Lcx4IU=
Subject key identifier: 0B:14:78:56:F8:C0:DA:52:CC:30:17:24:42:2F:34:3C:EE:3C:F2:34
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 0194BCA9826FEF313BAED2D10031B3074D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 082F
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: sgjEgD2dBZBg0/Y1nOWxLIf+uDsMP2RrASP8zAYg//Y=)
2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:6f:ef:31:3b:ae:d2:d1:00:31:b3:07:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=0b147856f8c0da52cc301724422f343cee3cf234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:27:ff:87:72:6c:c9:15:50:39:63:02:e6:
9d:2c:0d:b0:7a:66:e9:2a:5a:e8:11:24:4a:f3:28:
be:72:fb:53:9a:5f:86:2f:cb:36:27:1f:61:23:48:
e3:95:ae:83:61:ad:77:c9:ad:a5:8c:94:c5:da:8f:
d9:75:15:9b:76:dd:46:3e:cd:17:c4:38:3c:e4:e0:
87:d4:f3:74:17:35:d1:11:60:79:03:3b:6b:3e:c7:
77:a9:ac:6f:f7:1a:c2:24:c9:4e:66:78:34:57:bd:
bf:3c:52:64:47:e1:cb:f7:91:b5:ee:66:f4:6f:61:
c5:be:8c:03:01:d2:eb:24:58:c9:1d:90:d5:a2:36:
44:18:b4:ca:cc:c6:4e:9f:27:32:92:9a:a7:60:49:
4b:10:eb:e9:c1:af:e9:84:10:3f:05:26:2d:a4:be:
6e:d0:68:6f:e7:4f:41:d1:27:cd:25:a5:2d:0e:6e:
7f:e6:fb:93:bd:d2:1f:8c:e8:20:2a:28:ef:c0:8a:
5e:94:95:a5:9b:db:b4:62:bf:fd:f6:4d:4b:0d:a1:
a9:da:df:6f:bd:cf:9c:e2:4c:2c:8a:fb:9f:97:66:
0f:5b:1a:39:08:cc:6d:89:f9:68:b2:d6:eb:e0:c3:
0f:7a:ec:4b:e2:d5:73:f0:f2:08:43:c2:c6:6b:b2:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:14:78:56:F8:C0:DA:52:CC:30:17:24:42:2F:34:3C:EE:3C:F2:34
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:75:e4:9b:7d:b5:76:41:b9:3e:7b:19:3a:30:68:29:9c:
dc:f9:da:bd:8d:22:3c:1c:d2:00:f4:1c:ca:22:a8:3f:8d:53:
41:99:dd:56:4b:e3:a0:7d:44:7e:d4:5d:75:60:a0:3a:9f:21:
b0:57:df:e9:1e:b6:90:41:b2:5d:20:55:3a:03:71:8d:2d:51:
81:be:12:bd:ce:4c:1e:ee:e3:45:b7:b6:53:6a:42:6c:b5:91:
5a:2f:8b:4e:9a:0e:5b:77:92:27:7b:ee:28:c1:bc:5c:ed:66:
8f:05:33:6d:d6:ac:00:90:b4:6c:8b:df:20:28:f4:49:d4:05:
3d:c9:f8:7d:85:f7:42:eb:8a:69:af:be:b2:d9:30:f4:41:d0:
b4:0c:6f:98:75:c1:59:cf:8a:68:19:00:e8:8b:14:b3:35:85:
f7:07:8a:72:bb:16:f0:da:a8:cf:97:fb:ad:c5:64:e3:6b:5d:
e8:3f:25:22:42:e2:38:d7:fe:75:2a:b7:2e:23:c8:02:5a:8e:
0b:2f:14:08:9a:88:01:16:f9:3f:85:99:f6:5a:7b:2a:6d:da:
fa:eb:47:ad:3c:cf:97:d2:e3:58:b7:81:fa:9f:0f:2d:49:86:
4c:a9:90:96:8e:17:66:f2:f8:d3:26:c6:d5:af:65:03:28:3d:
0b:83:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:15 2025 by rpki-client