Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: p8/nxGpEv6cuEdiskMw0r0vcq/BiTmbwIyr/djzNE7M=
Subject key identifier: 85:DE:C0:E0:CB:C8:A1:CC:F8:2F:A9:54:E8:1B:B7:E6:06:42:3F:DE
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 0194BC3C00E77F674A8EC560147A05150D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: AcmdVCEb8nf2vLEfq4+mj4osXKOcQEMk1bjHcXQEHmw=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:e7:7f:67:4a:8e:c5:60:14:7a:05:15:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=85dec0e0cbc8a1ccf82fa954e81bb7e606423fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:49:83:ca:3b:89:2e:db:ad:b0:22:a8:ad:
fb:b6:88:13:7d:e0:9f:ae:86:2b:5b:e7:9c:2f:bd:
8b:cb:4d:92:af:b9:0a:39:90:51:5f:97:98:b9:4c:
a2:ad:28:c1:2d:03:8b:b3:c6:3d:92:f1:a2:b0:e2:
b5:3a:b0:30:64:ca:d3:65:43:e5:4c:89:c1:72:a5:
21:0f:2b:46:67:d5:cd:d8:ae:c0:81:33:27:10:08:
c3:05:e2:c1:86:ce:24:42:de:ce:52:bb:e3:f7:54:
ff:08:26:ea:d2:09:45:86:54:a6:19:c3:b9:16:ec:
aa:06:71:79:1a:36:60:f3:d1:6b:49:ee:9c:01:6f:
bc:f1:bc:46:95:34:22:e0:39:a8:4f:93:ac:d9:d6:
c2:a9:29:1e:b4:c0:e3:b3:2d:0b:c7:47:28:21:8d:
02:00:81:ac:43:c5:a1:ed:e1:44:9e:82:dd:da:7d:
9f:16:2e:31:40:b4:41:ef:cb:38:2a:d8:7d:27:f8:
78:ef:bb:53:63:fa:a3:8d:a7:ba:3e:8e:c4:bb:b7:
70:30:6f:d8:09:75:89:bc:68:dc:80:98:77:79:78:
0e:24:38:de:c9:a9:6d:ec:b8:81:9e:4f:8a:8e:7e:
d0:1c:c4:79:b9:7f:29:57:79:8b:c2:a3:f3:87:19:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:C0:E0:CB:C8:A1:CC:F8:2F:A9:54:E8:1B:B7:E6:06:42:3F:DE
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:56:43:cc:73:55:b5:aa:bf:21:62:8e:6d:31:60:dc:cd:
3b:17:81:39:14:37:6f:4b:5a:45:9c:38:5e:04:c5:50:c8:78:
a1:1c:1d:b2:d9:d7:3f:f5:c3:e2:fd:ee:7b:0e:46:51:75:b5:
90:2a:18:7b:7b:48:75:80:d0:dd:a2:f0:72:ba:9f:41:4c:41:
2e:1b:65:32:38:53:89:29:8e:00:a7:ec:36:15:1c:9a:30:6a:
2e:1c:43:f4:86:1d:70:57:0a:da:d7:cb:01:6e:c0:6f:24:ff:
8e:e4:81:e3:34:c9:0a:1a:dc:de:ef:96:0d:e8:14:ef:e0:22:
bf:ba:83:8f:6e:af:09:64:fa:e9:70:c7:e2:25:9b:e0:52:2c:
95:2f:18:dc:11:4c:6b:cb:4f:33:06:c6:e7:7e:8b:44:57:6d:
47:02:23:80:f7:46:cc:71:be:be:11:2e:70:a8:f7:76:f5:0e:
1c:b8:d3:2c:2d:71:46:7e:5c:20:7e:de:32:ab:07:74:b4:65:
69:9a:d6:81:d4:fa:ec:ed:2a:ba:ea:39:bf:96:c3:dc:b0:67:
b8:7f:c8:1d:ac:2c:b1:ef:33:d0:de:be:3f:19:92:66:33:a9:
bc:22:2f:af:34:7f:7c:81:b4:34:04:c7:bd:63:9d:e9:d1:d0:
ca:da:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:39 2025 by rpki-client