Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: wKWw90jFg3t6a4zpxLzAPRgpXtWkwNQvXDVzvnrMSvU=
Subject key identifier: D7:6E:22:6E:EC:71:EC:01:CF:92:58:47:A0:B9:D1:66:9B:DC:8C:E2
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 0195E122515183D80E0167B7A9BC0E8B413B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 14BD
Signing time: Sat 29 Mar 2025 09:01:17 +0000
Manifest this update: Sat 29 Mar 2025 09:01:17 +0000
Manifest next update: Sun 30 Mar 2025 09:01:17 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: a2bzNXRjFn3SxPkEKn1RHTNWeWqthpzpdVHoCOl2/+g=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:51:51:83:d8:0e:01:67:b7:a9:bc:0e:8b:41:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Mar 29 09:01:17 2025 GMT
Not After : Mar 30 09:01:17 2025 GMT
Subject: CN=d76e226eec71ec01cf925847a0b9d1669bdc8ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:1d:ea:0b:ed:c3:c2:f2:53:b9:a2:e7:8c:
bd:7a:2e:e3:62:07:50:36:30:4c:3d:0c:8d:a6:86:
00:7c:8c:cc:45:7a:64:4a:0c:cb:e8:8f:77:b5:f7:
59:ff:7a:f0:0b:b0:77:1d:e8:7f:7d:35:d1:82:0c:
13:2b:fb:e1:31:98:91:00:1c:57:b3:29:1f:50:23:
ea:f0:65:9c:69:af:9c:31:6b:ba:f9:ce:8d:66:cf:
5d:00:40:be:ba:b4:fe:c1:b9:c1:b6:93:5a:ad:29:
b9:c6:2b:db:be:a3:0c:db:8f:c1:73:63:de:f3:6c:
de:23:00:8c:6d:ef:f9:8b:17:98:88:6e:f8:97:5c:
5a:8d:d2:41:24:4e:7f:3b:0c:74:09:78:98:0b:be:
82:fd:94:19:3c:f0:ad:c8:75:95:88:ff:2a:8b:90:
ae:de:b3:42:27:81:dd:73:18:9e:a0:5f:5b:a8:d3:
04:5c:ac:f3:63:c6:f8:93:3e:78:4a:4e:9f:b1:7c:
87:e5:da:d0:bf:c9:e9:29:fc:c6:28:5c:98:70:d8:
af:0c:00:b0:34:cc:74:02:9e:73:87:41:86:4a:ee:
38:3e:2d:05:05:c2:23:44:3e:9d:d7:f9:18:be:12:
39:6b:e7:a3:da:00:6e:c5:61:9d:d2:a1:52:ba:75:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:22:6E:EC:71:EC:01:CF:92:58:47:A0:B9:D1:66:9B:DC:8C:E2
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:47:99:46:f6:9f:e8:b8:b7:81:35:60:30:02:84:ae:81:e7:
dd:08:b7:59:ee:6b:00:6d:3b:87:07:d8:f2:c1:79:4c:6e:17:
88:92:f7:34:5d:c0:93:9e:72:67:f1:24:9a:f4:05:c4:4b:14:
91:32:31:f5:84:f6:74:3b:2a:e3:31:5f:75:04:bd:72:91:ea:
13:6c:3d:ec:9e:f3:25:89:01:19:a9:1b:38:8d:38:da:a7:09:
6c:5d:c4:f9:60:c1:70:c3:33:e1:02:82:8b:bd:12:9d:c1:97:
3a:19:00:70:d9:e6:2a:8e:6e:f4:e0:4a:cc:48:b4:af:99:6f:
bc:cb:9c:d6:14:14:6b:f4:dc:c5:47:7c:1c:62:35:81:19:d9:
2d:24:0f:dc:72:3f:15:54:a7:b4:74:b3:ca:56:b5:a5:aa:dd:
15:84:b1:48:c9:71:e6:46:9d:5c:b0:04:dd:03:2c:8d:86:27:
2a:dc:df:7a:45:f4:8f:9c:cd:51:80:87:b0:60:36:14:6c:ae:
a1:31:32:01:47:9f:85:3d:91:32:f1:59:08:d3:5b:5a:9a:31:
17:8f:e9:38:d8:5e:6a:38:c6:a4:08:75:8e:93:b2:48:bf:50:
31:d4:8f:4a:eb:a4:16:29:58:ce:ad:89:8b:3c:3a:fd:cc:c8:
9c:7b:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:03 2025 by rpki-client