Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: 0XYpjG+rMSYICKFpK0hzT1Qz+qA1fcgirJXm4P9unkA=
Subject key identifier: 31:D6:86:C1:96:BE:F9:24:A4:DB:A3:B7:20:AB:D5:DE:A1:26:0A:CC
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 0195DFD8A0C0483AD146B05CE364BB3D3AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 0804
Signing time: Sat 29 Mar 2025 03:01:10 +0000
Manifest this update: Sat 29 Mar 2025 03:01:10 +0000
Manifest next update: Sun 30 Mar 2025 03:01:10 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: F0tz5QYzqfEODyrvk2FdrXZvj21FSbbOaX/+p/coH/E=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a0:c0:48:3a:d1:46:b0:5c:e3:64:bb:3d:3a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Mar 29 03:01:10 2025 GMT
Not After : Mar 30 03:01:10 2025 GMT
Subject: CN=31d686c196bef924a4dba3b720abd5dea1260acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:86:df:f4:d4:a5:41:9c:0f:4d:68:9a:ba:
bc:36:39:23:bc:5a:56:3b:19:b1:7c:cd:8d:2c:a3:
5e:f3:82:02:10:d8:74:a4:75:dc:ab:45:b4:62:0f:
4a:c0:7f:33:7e:43:61:5e:7b:ce:bb:ea:f6:a2:e3:
36:c7:69:ea:98:7e:d2:69:e2:ee:ae:ef:fd:d0:9f:
be:f2:2c:96:76:c8:2e:c2:22:83:cd:3a:46:8b:5d:
f6:29:6b:ee:b7:90:92:8a:ab:7a:fb:9d:04:67:8a:
40:e9:e9:e5:de:21:bc:35:3a:d8:6a:9f:85:c6:b2:
52:a8:53:20:67:01:2e:3f:d7:74:7c:5e:08:3d:72:
cf:37:50:b0:e7:07:a5:4f:cd:7c:61:8e:bf:d1:81:
6b:a8:31:46:bf:53:c5:09:3d:6c:05:cc:37:81:cc:
69:f4:10:97:09:88:4d:bf:d6:59:8d:33:24:85:db:
83:c4:55:5e:d8:d2:55:ad:33:6a:d8:a9:b7:8b:90:
bb:9a:6a:62:58:45:cd:39:7a:d4:e8:53:6c:b8:ad:
2e:0a:13:97:b6:c9:6e:80:e1:0e:26:05:87:c8:7d:
9e:8b:4f:32:3f:35:a7:4b:0d:1a:4e:1a:0b:1d:13:
d1:b2:d4:e0:2a:be:cc:66:b0:d4:69:c2:65:87:f9:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:86:C1:96:BE:F9:24:A4:DB:A3:B7:20:AB:D5:DE:A1:26:0A:CC
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:72:fa:cc:72:d2:28:b3:bb:9d:ac:2e:8e:dc:a9:ee:52:
66:04:72:3e:a3:0e:4a:1d:6c:32:a5:80:d5:01:f4:ee:f5:a0:
7c:7a:c1:7c:e6:33:e2:19:05:0e:60:b1:80:d2:af:a2:d9:07:
5d:af:12:ea:0e:eb:62:9c:09:66:02:85:1e:d8:16:8b:7a:c6:
50:f5:c6:c8:3f:67:b7:fe:a3:b6:c9:80:56:48:ee:6b:af:85:
62:59:c8:fb:44:92:b9:7d:14:a9:c7:30:ec:34:dd:9d:37:d0:
d1:e5:42:31:89:b6:4b:e8:a6:33:62:15:68:34:63:29:45:a9:
d8:5d:de:cf:1d:2f:c4:c3:ae:21:46:32:0c:d9:3a:10:5d:30:
a6:9f:30:42:e9:ff:82:89:fe:e6:3f:e4:62:3a:2c:11:99:4a:
a2:a7:b8:fa:4d:1b:3b:c0:9b:ee:f1:ea:d5:d7:86:ec:cf:27:
a0:c4:b7:9c:cd:73:26:13:0a:2b:a5:ce:e2:13:ec:f0:b7:9a:
8f:1d:ab:0d:30:f7:46:a8:6a:d8:90:b2:76:48:8c:2f:a6:6a:
e1:7c:e0:73:4a:35:4c:b3:bf:8a:96:d8:9d:3f:78:36:f4:ff:
42:92:e2:11:4f:d1:e4:be:49:92:c1:c2:ae:e3:2e:67:38:b4:
65:44:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:30:44 2025 by rpki-client