Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
File: 0IhbQcqB-T9YPB7KcitQVYKAxZo.mft (raw, json)
Hash identifier: LV9r39rbIUHUlPwHgLLET8pmSOiBWhuOYM9dPFCwpzQ=
Subject key identifier: B1:52:8E:46:F2:65:2A:FB:9C:25:5A:B1:02:C1:88:7B:F2:FC:47:8C
Authority key identifier: D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
Certificate issuer: /CN=d0885b41ca81f93f583c1eca722b50558280c59a
Certificate serial: 01932DFC5A67421C5CBDE2672F449C7FF034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
Manifest number: 135B
Signing time: Fri 15 Nov 2024 04:02:12 +0000
Manifest this update: Fri 15 Nov 2024 04:02:12 +0000
Manifest next update: Sat 16 Nov 2024 04:02:12 +0000
Files and hashes: 1: 0IhbQcqB-T9YPB7KcitQVYKAxZo.crl (hash: 6rJGPsoh4JH3n5q8zWC0Sxut8hr4agPoFKdZ32dy6AA=)
2: PbD_YpB2I8RPNvIGY_jfvbC9Jp0.roa (hash: wnz+SWvI03910vTJkLnMypz5Xf7O6dK+S9jgdcRzu5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2d:fc:5a:67:42:1c:5c:bd:e2:67:2f:44:9c:7f:f0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0885b41ca81f93f583c1eca722b50558280c59a
Validity
Not Before: Nov 15 04:02:12 2024 GMT
Not After : Nov 16 04:02:12 2024 GMT
Subject: CN=b1528e46f2652afb9c255ab102c1887bf2fc478c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:d9:ce:03:6b:1b:35:38:91:cc:bc:60:7c:
70:02:12:a8:8e:40:52:f9:ee:16:9e:6e:88:cd:fb:
5e:d8:e1:b1:54:2d:28:83:00:94:75:d6:e3:a2:a4:
bd:37:4b:82:90:3b:09:5c:0f:09:bc:0f:5b:8b:30:
06:dc:6e:08:2b:d4:d0:b4:8b:09:55:17:1a:3b:76:
6e:64:85:3c:72:f9:3c:69:ec:6e:08:da:38:12:6c:
de:a1:2d:a4:80:d4:cd:3d:3e:ea:71:51:da:e4:07:
8a:7c:97:ce:eb:ab:5e:82:59:d6:c9:f4:57:eb:45:
74:e0:fa:3a:da:d3:e9:56:f1:12:8e:df:c1:64:79:
c3:fa:b4:21:d8:f6:fc:ff:c0:68:40:d8:66:63:77:
78:95:07:12:df:b7:93:7f:48:e4:ec:d3:dd:a8:ae:
05:10:01:36:20:14:71:6e:26:2d:8b:8b:5e:77:88:
4c:64:ad:48:07:45:c9:ec:57:90:1b:c0:5a:5f:b3:
cd:58:f1:b6:69:3c:b7:f3:90:00:86:54:11:6c:37:
40:2c:52:13:c9:ee:55:cc:5b:26:8f:84:8a:89:78:
88:2a:11:65:22:c0:0f:d3:aa:7c:b0:86:dc:7b:60:
80:cd:c3:0c:b1:71:ca:98:56:5d:91:df:4b:fc:49:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:8E:46:F2:65:2A:FB:9C:25:5A:B1:02:C1:88:7B:F2:FC:47:8C
X509v3 Authority Key Identifier:
keyid:D0:88:5B:41:CA:81:F9:3F:58:3C:1E:CA:72:2B:50:55:82:80:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IhbQcqB-T9YPB7KcitQVYKAxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4916b7-000e-489d-9783-f2569ea4cd74/1/0IhbQcqB-T9YPB7KcitQVYKAxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f4:dd:e8:9b:4f:a0:16:5c:ff:7d:c8:39:63:85:f2:ca:dd:
52:70:26:8d:f9:fb:f9:92:74:24:02:5a:df:83:ef:e2:1a:0b:
61:37:02:f6:f6:35:df:5c:84:64:20:9b:d9:93:4b:ef:7b:14:
aa:f5:a2:cb:74:43:b0:e1:e4:b5:7d:5c:7c:43:8b:00:af:3f:
6a:b7:64:1b:45:96:46:2e:12:3d:d9:21:aa:15:96:99:c8:3f:
6d:e8:49:a2:1f:15:b1:cd:b5:c7:67:b8:d4:42:c4:d4:f6:c2:
98:84:1e:9e:57:22:7f:59:af:b9:84:42:52:53:2f:bc:dd:b8:
a4:05:1b:16:14:b9:43:53:2f:d8:55:e9:31:f5:38:51:1c:27:
ca:ec:58:6f:09:30:7d:83:ca:59:89:05:f1:26:46:40:67:54:
16:62:76:44:14:6a:46:38:96:b8:b5:c8:0e:b0:be:7d:cd:83:
69:ee:3e:b7:42:ad:7e:47:fe:86:bc:dc:5a:de:ba:3a:b4:54:
0b:3f:48:f0:57:fe:ff:a3:7e:a7:6b:23:df:40:40:dd:3b:9b:
2f:95:5d:a6:75:b8:24:0f:57:03:94:93:84:3e:29:c5:4f:c3:
6c:83:b9:4a:ce:76:1f:8e:b6:2b:cc:11:61:b7:bc:46:65:9b:
ba:b9:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:20:58 2025 by rpki-client