Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.mft
File: rRLao4SIi1JH33EpZYA_DT-omJ0.mft (raw, json)
Hash identifier: 26hWzoSDamFTY2h+1wZRWUOT6RF+/9xFNuiwxVtBAFU=
Subject key identifier: 96:F3:F4:E9:86:9F:42:4A:50:33:83:22:37:C8:EE:9C:A1:F2:AD:B9
Authority key identifier: AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
Certificate issuer: /CN=ad12daa384888b5247df712965803f0d3fa8989d
Certificate serial: 018ECB5077E1E1EFC4D2EF2ECF3066DAE441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.mft
Manifest number: 0D12
Signing time: Thu 11 Apr 2024 04:00:32 +0000
Manifest this update: Thu 11 Apr 2024 04:00:32 +0000
Manifest next update: Fri 12 Apr 2024 04:00:32 +0000
Files and hashes: 1: Rwd91rs9PVEAmGe2vfPrWiGSoxs.roa (hash: yR1L5WDYDbhuAZO2DOUF31/aLwoV1kUBTUi8Mvt8uwk=)
2: q8e5dMtW_OxsBFcb0BH0cwB83FU.roa (hash: L8dEctctWjgcIL1d+P0cQydEsbfhQJOQYps7mbt33xY=)
3: rRLao4SIi1JH33EpZYA_DT-omJ0.crl (hash: ZWbOFNjdNnH5q9n6yMc1YJePMnG3+Sd0KjUeBg2ngjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:50:77:e1:e1:ef:c4:d2:ef:2e:cf:30:66:da:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad12daa384888b5247df712965803f0d3fa8989d
Validity
Not Before: Apr 11 04:00:32 2024 GMT
Not After : Apr 12 04:00:32 2024 GMT
Subject: CN=96f3f4e9869f424a5033832237c8ee9ca1f2adb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:5e:ac:d8:4f:d2:b6:4a:33:60:33:77:8f:
65:78:59:c2:3b:1f:83:e0:02:87:fe:a8:25:de:c3:
0b:89:44:56:3f:c2:2e:a4:5c:85:53:c5:c6:15:95:
89:e8:0e:cc:84:18:e5:fb:80:be:67:c2:53:7e:fb:
81:2c:8a:b1:3b:0b:f9:15:5a:28:50:ca:8a:8a:62:
90:1e:b5:86:73:26:31:4a:24:79:ad:50:19:b8:6d:
d5:74:5a:01:b8:95:13:7d:ec:b4:35:e1:e3:1d:ce:
7b:99:8a:27:a0:e7:e1:75:75:fd:35:81:53:a3:65:
1d:8b:61:a7:d5:f9:70:09:1b:b6:c9:64:d8:4a:c3:
76:c8:94:ec:ce:9e:6f:92:da:ac:26:7f:e3:43:b9:
0f:c4:c7:ff:1d:b1:87:56:76:c2:2d:3e:fb:ca:de:
f0:9d:1b:6d:45:cc:d5:e0:23:72:e7:94:6d:4e:e8:
28:f9:07:dd:39:2e:9e:05:4b:a0:79:e4:b6:14:09:
c4:01:1b:33:03:9e:fa:1a:bd:30:1c:69:a2:0f:60:
2e:e2:6f:4e:2a:b9:80:68:01:bf:58:af:e6:d5:54:
22:47:2e:ef:82:f2:5a:9d:66:f1:50:4c:f6:5c:25:
12:90:c3:79:cd:ee:87:e5:83:6a:25:4b:8e:6d:3d:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:F4:E9:86:9F:42:4A:50:33:83:22:37:C8:EE:9C:A1:F2:AD:B9
X509v3 Authority Key Identifier:
keyid:AD:12:DA:A3:84:88:8B:52:47:DF:71:29:65:80:3F:0D:3F:A8:98:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRLao4SIi1JH33EpZYA_DT-omJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2a965c-3347-443e-88c7-5b4d52dc2de2/1/rRLao4SIi1JH33EpZYA_DT-omJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:77:b2:60:c6:b7:32:21:41:ae:8a:c8:ea:ce:86:33:ab:25:
8e:76:48:ea:06:b2:13:e4:b1:77:24:a3:85:88:48:32:3c:78:
58:95:b6:e4:a5:6f:0e:93:11:ef:e9:73:fe:6f:60:53:bb:e1:
58:77:61:11:7a:43:62:ef:f3:71:6e:2b:ea:89:d4:8e:86:29:
39:78:20:1c:cd:fc:c5:80:ff:b3:3b:ef:0d:5c:10:ef:76:cb:
1a:67:b9:ca:39:5a:df:5b:73:16:d1:ad:a9:07:15:72:a1:f2:
99:62:cb:4e:cc:ee:61:bc:18:86:36:00:a7:d2:81:be:d3:4d:
07:83:16:fa:64:c5:3b:13:7a:01:01:24:3a:ca:8e:39:28:a5:
bd:3d:aa:1a:67:0e:74:60:40:9a:26:37:2f:12:18:14:c8:74:
3b:17:b5:a1:f5:43:b7:e1:23:02:03:a9:4e:7d:d5:a5:77:58:
ba:b0:f5:38:9e:7b:7a:63:53:7f:70:33:be:2c:60:b0:64:cb:
d7:0d:b4:2f:20:34:4d:ff:eb:52:97:14:eb:50:3f:5b:df:e7:
ab:1a:3e:6d:33:81:3c:10:4d:35:03:9f:8c:af:d3:bc:f5:d9:
a9:3f:71:2b:0f:e4:33:2f:ee:7d:d3:fe:cd:f8:3a:11:f4:79:
65:b1:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:01 2025 by rpki-client