Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/05fcDKqZfVBLWj8Or3sY6nMM6KM.mft
File: 05fcDKqZfVBLWj8Or3sY6nMM6KM.mft (raw, json)
Hash identifier: ncAvhBRpoRP7pJoDCj6Lhyk/XrJFz7EdCTRQ1A2SyPU=
Subject key identifier: B5:E4:C6:74:F6:11:FE:E8:06:AD:CE:6D:30:63:3C:24:21:38:AA:8E
Authority key identifier: D3:97:DC:0C:AA:99:7D:50:4B:5A:3F:0E:AF:7B:18:EA:73:0C:E8:A3
Certificate issuer: /CN=d397dc0caa997d504b5a3f0eaf7b18ea730ce8a3
Certificate serial: 0193E314DC3F69812365054C3939FC6AA9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05fcDKqZfVBLWj8Or3sY6nMM6KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/05fcDKqZfVBLWj8Or3sY6nMM6KM.mft
Manifest number: 0BAE
Signing time: Fri 20 Dec 2024 08:00:15 +0000
Manifest this update: Fri 20 Dec 2024 08:00:15 +0000
Manifest next update: Sat 21 Dec 2024 08:00:15 +0000
Files and hashes: 1: 05fcDKqZfVBLWj8Or3sY6nMM6KM.crl (hash: lG/xMGQQohiwwEf6Xih6FtCvbrRQgB4PMT7bQB3cA9w=)
2: 3HAm0z5Rge3U92pJiCO8431HckU.roa (hash: iG/6IM5Z4G+iCTLT1liRHst76DvHktMmrb9ujOwCs7g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:14:dc:3f:69:81:23:65:05:4c:39:39:fc:6a:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d397dc0caa997d504b5a3f0eaf7b18ea730ce8a3
Validity
Not Before: Dec 20 08:00:15 2024 GMT
Not After : Dec 21 08:00:15 2024 GMT
Subject: CN=b5e4c674f611fee806adce6d30633c242138aa8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:c3:66:fd:55:13:d3:cd:0f:7f:9e:1f:47:
73:0a:de:0a:9d:d6:e9:dc:e5:67:e3:ce:7d:f4:29:
6c:0a:35:f2:28:e6:ca:28:e9:0d:12:9c:ce:ad:41:
52:d5:ac:3a:1e:0b:3e:f4:66:ad:ac:e7:4e:f3:6f:
68:34:aa:ca:fd:26:68:05:a5:f7:ce:32:d5:ce:26:
7b:f7:56:c9:0c:7b:2f:59:fd:67:d1:e8:9c:0c:88:
1e:35:fe:43:b5:07:e2:68:63:7c:0a:25:6d:ab:a8:
77:7c:c7:eb:0d:bf:63:54:c9:85:e7:a5:cf:57:06:
34:45:51:e7:a2:cb:31:dd:75:ca:f5:a6:62:46:01:
8d:91:1b:12:97:14:44:9c:79:6f:27:aa:9f:d5:30:
61:c4:b9:23:e1:8c:9c:28:5a:85:25:ca:54:48:a3:
9c:e6:59:3e:38:03:8b:77:d9:f9:0c:16:8e:86:7a:
b7:88:8c:c5:22:ab:99:cd:4c:6f:95:2a:5c:bc:8a:
b5:f4:96:bd:e2:a9:55:70:16:41:f1:58:06:c0:91:
cf:bb:d9:40:e0:8c:a7:1c:0d:63:c4:28:fd:b3:5f:
19:4a:b8:e8:5f:a2:b1:ed:c2:dc:ca:b7:67:31:c1:
0d:99:83:c1:2c:85:46:61:e6:7f:ca:32:98:d8:2a:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:C6:74:F6:11:FE:E8:06:AD:CE:6D:30:63:3C:24:21:38:AA:8E
X509v3 Authority Key Identifier:
keyid:D3:97:DC:0C:AA:99:7D:50:4B:5A:3F:0E:AF:7B:18:EA:73:0C:E8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05fcDKqZfVBLWj8Or3sY6nMM6KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/05fcDKqZfVBLWj8Or3sY6nMM6KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0d43e3-3e44-4a82-89b4-8ba438e76b53/1/05fcDKqZfVBLWj8Or3sY6nMM6KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:36:b3:1a:c6:e0:df:f3:a6:19:92:4e:e7:07:cb:f3:9d:25:
ea:3f:01:8f:37:5a:05:e5:19:40:c1:8b:24:0b:c7:75:66:7b:
96:7a:9e:7f:34:47:1c:63:fb:e3:c8:90:59:a9:e8:75:58:c0:
19:e5:d7:e2:1d:57:83:06:1d:2c:09:6d:e4:38:12:16:77:b1:
d8:63:d8:ea:37:40:49:5f:79:73:72:fe:10:ae:6f:1c:1f:9e:
9b:0b:93:71:07:ff:a1:12:ae:4c:b1:ed:56:4a:4f:d3:53:3b:
93:f3:a8:a8:74:71:82:51:f4:5f:ca:7c:a1:8b:d8:29:3a:11:
b0:63:c2:97:90:f8:39:0f:b1:01:f4:aa:de:55:2f:db:e7:82:
1c:7b:f5:57:59:f6:34:d7:33:90:66:75:6a:ef:53:97:df:36:
df:f7:4c:f7:de:93:f2:10:fa:97:7c:5f:cf:41:ee:8a:2d:03:
cf:87:e4:d9:c5:a7:6d:dc:9d:cf:c0:e5:26:5a:bc:2b:aa:02:
16:31:d1:45:84:fc:13:59:0a:b7:55:63:d9:84:4a:bd:af:ea:
fa:86:ea:16:e2:e6:9c:61:81:ce:cf:5d:13:d0:56:a8:24:53:
75:3d:af:f3:36:6b:78:8d:0e:13:bc:e7:8a:18:54:60:68:9e:
60:e1:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:59 2025 by rpki-client