Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.mft
File: r0DPJba2uDvE-haThFv2N1l0Eso.mft (raw, json)
Hash identifier: QQqOJ8pd4i/V0VPHiOU4lqsg4aNs5quMDuGdKSWWcZA=
Subject key identifier: 9B:B8:0A:BB:45:5C:5F:B9:4F:8B:E7:14:BE:EC:A6:50:CE:6A:32:A3
Authority key identifier: AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
Certificate issuer: /CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Certificate serial: 0187948761A127A91D8D5BF1B7F44116DB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.mft
Manifest number: 0A2D
Signing time: Tue 18 Apr 2023 13:21:52 +0000
Manifest this update: Tue 18 Apr 2023 13:21:52 +0000
Manifest next update: Wed 19 Apr 2023 13:21:52 +0000
Files and hashes: 1: r0DPJba2uDvE-haThFv2N1l0Eso.crl (hash: C1+ozw8bQInZmwrZ8+0PPkiyBdv97osEQ3LumM8n11Y=)
2: r96CDZ29E-fcIUFShP-BgZDkpMY.roa (hash: 9Lg6IzJLXWW9+51ByfSqMKOQ7/I4ChqMPGWQmau/bfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:87:61:a1:27:a9:1d:8d:5b:f1:b7:f4:41:16:db:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Validity
Not Before: Apr 18 13:21:52 2023 GMT
Not After : Apr 19 13:21:52 2023 GMT
Subject: CN=9bb80abb455c5fb94f8be714beeca650ce6a32a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:23:84:ed:f8:48:fc:c3:aa:5a:d2:2a:c7:
fe:33:aa:eb:f0:32:ae:83:97:de:e5:39:8a:52:e9:
d8:07:9b:53:cc:f1:74:67:08:a4:86:b5:af:c5:6c:
59:5a:e7:f4:49:3b:32:92:aa:40:cf:f3:c1:4e:cc:
14:2a:9c:24:10:ed:fa:d7:89:03:34:94:4a:de:c2:
f2:50:6a:dc:8f:e8:1b:3b:b7:1b:5b:98:90:7d:54:
9f:a8:9a:d2:67:1d:06:43:65:db:06:0a:81:dc:6c:
e4:fa:c1:ba:6f:37:6d:82:54:93:32:18:6b:5e:a1:
17:09:18:3a:fe:76:e3:0c:09:11:43:4f:ae:5d:76:
7a:ec:76:bd:83:08:44:d1:b1:6f:fc:d7:58:59:63:
45:e7:96:20:7c:9d:e8:ed:7e:0e:2d:77:51:5b:d8:
09:9f:9f:f8:05:cf:be:4e:8e:14:74:8d:81:7d:8d:
57:77:02:64:3b:d9:39:db:c1:35:16:1b:73:27:5d:
d4:01:51:e5:f6:46:c3:21:7a:86:e0:98:e9:78:d0:
6e:69:df:ba:46:41:ea:5f:5f:df:cb:4f:90:40:16:
e2:ec:16:a9:f9:ba:44:85:36:da:e2:ef:6b:71:d8:
29:d5:f4:cf:fa:85:50:19:db:6d:10:a8:3a:e7:e4:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B8:0A:BB:45:5C:5F:B9:4F:8B:E7:14:BE:EC:A6:50:CE:6A:32:A3
X509v3 Authority Key Identifier:
keyid:AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:79:5b:e8:34:b1:45:6d:70:c2:c3:9d:c5:d9:ac:52:5f:7a:
c5:f1:80:9f:dc:fe:f1:f0:d7:f0:16:71:7b:ac:0d:71:7c:12:
5d:43:cd:fb:09:80:0a:fe:e4:8c:d1:2f:91:80:e0:20:27:ef:
64:c8:24:28:7c:c1:44:34:48:b4:92:98:22:bf:ba:e2:03:06:
31:2c:d4:8c:6b:03:df:f1:50:53:b2:75:7f:3b:78:23:3f:cc:
87:eb:2b:2a:25:11:3d:34:59:d1:c9:de:0d:8b:e6:29:cb:d7:
6d:13:12:a8:c1:14:a2:f4:e3:73:d6:56:a1:f1:85:06:91:57:
f4:af:16:6b:87:6c:86:c4:08:13:39:d0:4b:27:0b:9a:0c:71:
3c:83:8f:80:01:64:69:f4:6a:06:35:c0:ec:ea:2f:26:2b:08:
79:77:0d:4b:09:ed:96:fb:b8:f4:04:df:f3:65:7c:65:b4:f8:
fd:6a:61:1a:4e:9b:76:3b:bb:fe:11:24:6f:4d:39:9a:11:15:
1d:96:99:a5:be:48:84:92:71:fb:49:84:7a:90:78:e2:74:4c:
07:d3:56:9d:a1:9e:5d:db:21:26:e4:cd:46:f2:ec:fc:13:dd:
69:0b:59:c9:3b:71:fc:c4:f0:ad:1b:9b:3c:41:65:48:54:c9:
e4:4f:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:45 2025 by rpki-client