Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: EnKVTe72T386SvMTaghr24jPwxDAfWNjuCYK9gcLd/s=
Subject key identifier: 10:C4:A4:97:29:CC:2C:67:E6:3E:D4:29:98:A2:FF:3C:D7:34:8F:B6
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0195E00F674C917E55A6708A160B4F1E9772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 11F8
Signing time: Sat 29 Mar 2025 04:01:00 +0000
Manifest this update: Sat 29 Mar 2025 04:01:00 +0000
Manifest next update: Sun 30 Mar 2025 04:01:00 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: 6MCxxri4K+GPOT5bHyaiRdwA1f9jPBzEGL6mCJ3T1dw=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:67:4c:91:7e:55:a6:70:8a:16:0b:4f:1e:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Mar 29 04:01:00 2025 GMT
Not After : Mar 30 04:01:00 2025 GMT
Subject: CN=10c4a49729cc2c67e63ed42998a2ff3cd7348fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:76:31:e8:6a:e1:fd:76:47:0c:55:93:27:
c4:3a:45:94:9f:57:99:48:2f:56:26:b0:76:67:da:
e9:f7:06:22:db:62:6a:a4:9a:f2:84:70:ba:ba:88:
87:09:2e:cd:0a:8e:e6:ae:1c:6e:74:87:ee:55:03:
0d:9f:9b:5d:bf:52:1a:84:55:95:0c:1e:6f:e2:c0:
32:23:8c:bd:05:38:88:96:64:3d:1a:6e:67:25:92:
98:65:b1:2c:79:f7:90:c6:12:15:b7:96:a7:52:6a:
d8:68:ca:97:bc:9b:d8:f5:ba:ca:9e:a9:76:ab:bd:
d4:7c:d5:96:21:09:6f:12:36:fc:e8:99:a8:43:61:
0f:e6:00:63:59:d7:65:61:12:1a:64:08:bb:fa:e3:
97:31:40:75:df:0c:93:22:c0:0b:01:50:4a:cf:9d:
85:78:15:6a:59:68:77:69:94:f0:43:f5:cd:1c:6c:
e6:eb:7e:50:0f:e7:b3:2b:bd:d6:1a:4e:0a:72:6e:
79:19:ab:68:56:fc:09:26:b3:58:a9:cf:fe:4c:4c:
d9:86:27:88:5b:9e:94:94:d1:3b:8d:37:8c:13:3a:
eb:5f:e1:17:dd:71:8b:2e:37:4b:6d:93:d4:0b:d9:
2d:01:a5:cd:f2:21:54:4b:46:c3:27:51:6e:99:c3:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C4:A4:97:29:CC:2C:67:E6:3E:D4:29:98:A2:FF:3C:D7:34:8F:B6
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:dd:00:50:0b:e9:16:28:b6:1d:1b:b0:0d:71:08:c3:9a:25:
16:92:98:b7:13:f4:17:bd:71:5a:9a:94:63:f3:f0:89:38:0e:
fa:99:48:8f:a1:86:e6:31:d8:8d:62:28:f5:81:ec:1b:84:54:
45:3b:64:ea:9f:3b:49:6e:28:d0:bd:cc:6c:a8:3d:7e:5c:8c:
20:cb:5a:d2:91:93:42:33:27:03:33:47:d5:a0:d7:f6:f8:cf:
2c:04:40:c9:06:9e:e2:0e:86:f6:d1:11:64:01:57:2d:7c:5c:
f0:58:2e:5c:ff:68:62:05:21:c5:e6:43:87:5a:27:a4:56:41:
d9:61:a8:2c:9f:8c:c6:de:50:fc:a5:e9:9a:5a:d7:67:ad:17:
ee:b7:c7:ac:1c:f7:c8:8b:6c:93:c9:4d:d9:6d:8a:61:8e:55:
21:21:00:a1:9c:c8:ce:4c:9c:eb:00:15:64:53:2f:ee:eb:fa:
0f:39:e0:3f:04:66:ba:73:c2:10:c8:4b:e6:bb:43:8c:0a:1d:
78:7d:24:e3:4c:1b:f4:e6:49:f6:a0:73:70:7c:89:8a:53:94:
0d:b5:c2:54:0c:4b:11:02:9a:2e:c5:a5:76:0f:86:2b:77:7b:
f6:0c:7c:8b:df:3d:23:da:1e:67:9d:c2:ae:f2:e3:d2:96:aa:
90:78:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:50 2025 by rpki-client