Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
File: 8OlKP3YsIdcztI_yssV0VgXCvjM.mft (raw, json)
Hash identifier: k1QNfRmXKcvRVR+Ud6WT1jzprkG/Vu9s/Yyery37FRI=
Subject key identifier: 9D:36:AA:40:BB:DF:A5:CD:AF:E6:73:F3:7B:17:34:24:B7:6B:93:E9
Authority key identifier: F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
Certificate issuer: /CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Certificate serial: 01957DFF3CDC9757186615250F14D303C57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
Manifest number: 0F2D
Signing time: Mon 10 Mar 2025 03:00:33 +0000
Manifest this update: Mon 10 Mar 2025 03:00:33 +0000
Manifest next update: Tue 11 Mar 2025 03:00:33 +0000
Files and hashes: 1: 8OlKP3YsIdcztI_yssV0VgXCvjM.crl (hash: QqpDdPFzB57X7vZ6ME9YfqfwZYEJJbGc401OXz03F4c=)
2: NR9HV4acGoApHHDJDWYupOCz2zg.roa (hash: FriwYpmfuXTn7afUyv1p7OwXj5qQDdCL6/trn8iuuXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7d:ff:3c:dc:97:57:18:66:15:25:0f:14:d3:03:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e94a3f762c21d733b48ff2b2c5745605c2be33
Validity
Not Before: Mar 10 03:00:33 2025 GMT
Not After : Mar 11 03:00:33 2025 GMT
Subject: CN=9d36aa40bbdfa5cdafe673f37b173424b76b93e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:69:61:71:43:08:17:65:1d:45:c8:d3:5c:
9f:21:23:7f:9d:1c:d2:05:d8:03:05:29:7b:31:4a:
0c:6a:7d:10:a4:71:26:8a:76:9e:5f:8e:b2:6b:a0:
db:a8:0d:03:b1:11:66:df:2d:4d:9c:83:46:ed:09:
8f:91:c1:1e:78:d8:58:37:07:2a:27:7e:6c:6d:6d:
0e:24:62:cd:c7:e5:f2:a1:23:93:a4:b6:18:7c:85:
39:43:a4:47:fe:ec:ed:88:1a:96:6a:c1:5d:22:ef:
a6:f1:4d:21:28:b9:2b:b8:36:45:eb:f2:a5:9c:ae:
e7:b5:ba:f2:db:6b:53:7c:84:de:e5:57:e0:a7:8f:
52:06:5b:ca:5f:cf:8c:39:50:4f:4a:5b:1f:cd:21:
fb:39:36:81:4b:97:78:32:6e:21:e0:a7:b2:da:cb:
8a:89:f2:fb:38:26:6e:40:90:90:56:98:12:12:23:
bb:90:2c:4b:c0:e6:61:ae:c4:c5:7b:09:6c:f1:b8:
b7:a4:87:a5:d5:12:3f:fe:a9:9a:3c:5f:33:32:a3:
90:59:2b:3d:24:c2:47:35:54:52:c3:8b:a7:a7:4a:
c0:28:f2:2f:f6:59:88:eb:bd:fb:47:d9:76:db:c0:
bd:7f:66:b3:ff:f4:25:55:ab:6f:c5:3a:f9:aa:77:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:36:AA:40:BB:DF:A5:CD:AF:E6:73:F3:7B:17:34:24:B7:6B:93:E9
X509v3 Authority Key Identifier:
keyid:F0:E9:4A:3F:76:2C:21:D7:33:B4:8F:F2:B2:C5:74:56:05:C2:BE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OlKP3YsIdcztI_yssV0VgXCvjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0de973-6a91-4651-a3e3-7d5394531d18/1/8OlKP3YsIdcztI_yssV0VgXCvjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:29:33:65:84:25:11:38:6d:2d:58:47:3d:cf:db:4a:85:57:
cc:55:45:50:ca:7e:28:b1:d6:a7:84:80:10:69:15:68:e0:14:
7c:20:51:3b:7d:4f:76:8d:ef:9b:25:64:16:a3:28:70:e9:60:
38:69:3d:d7:8b:48:38:61:8b:b5:de:8c:65:07:4b:46:c4:cb:
2b:fb:60:dc:e7:db:73:93:6d:6a:49:25:e9:16:43:8c:c6:cf:
b8:c4:11:9e:df:d5:0f:5f:dd:5d:f2:1b:a2:42:09:c9:9c:4b:
bd:05:5e:29:11:09:05:66:4f:5c:8f:c8:01:5f:f2:29:e2:fc:
9a:51:c4:44:b9:7c:53:2f:ea:53:53:1f:73:54:b3:4e:63:98:
b0:8c:5c:09:4d:11:6d:46:0c:20:df:77:64:e1:32:11:f2:9a:
5c:1b:b1:35:e1:dd:1c:f1:5f:ef:96:74:8c:9b:63:ec:9f:46:
5c:29:5c:51:44:69:51:03:cd:9a:79:23:78:e8:c7:d4:07:26:
d9:1d:68:c0:68:1f:c8:5c:ee:03:ff:9c:86:b9:ec:4c:65:1a:
03:45:32:d9:c4:45:e6:65:98:7b:6d:f3:b8:4f:ba:55:6e:57:
3b:7d:a8:75:2a:32:c6:d9:9e:05:19:f6:18:a9:9b:6b:9e:41:
4e:dc:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:08:39 2025 by rpki-client