Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: bBspufStts3RxpsK+JUfOqR8FXWJW4BcE5JZmnKhqwk=
Subject key identifier: 51:3A:3C:A7:77:1B:27:A6:4E:71:65:AB:04:D9:33:30:B7:03:D2:BF
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 0194BD17F8B51C6F696835C43C79F3E66BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: jJhh9fQKohAbVltEY8ihz+36Sqwq1auGwZ+HryFwhnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f8:b5:1c:6f:69:68:35:c4:3c:79:f3:e6:6b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=513a3ca7771b27a64e7165ab04d93330b703d2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:20:f9:46:51:0b:9d:4c:f5:16:17:6a:8c:
e7:c8:04:fe:d1:0e:e5:eb:7c:73:b7:0a:86:98:e3:
9f:50:b5:e1:a7:ca:64:bc:98:17:e2:27:65:4c:d8:
11:8a:73:25:8b:b9:7e:20:4d:5a:30:be:90:8a:1d:
77:ca:b2:f8:39:0a:cd:19:c0:4d:a3:bd:1c:3a:08:
bb:41:26:08:7b:57:04:e4:7c:25:80:49:e9:c6:9d:
fe:d1:f5:12:c1:cd:67:cd:af:42:d6:17:8c:2c:ec:
5b:b7:52:5a:58:0a:5e:3a:a0:da:b4:06:01:70:f9:
21:ae:3d:9a:b8:cd:ae:1f:e9:37:86:52:4b:b6:ad:
2f:10:75:5a:79:33:62:de:46:07:d1:37:d6:98:0c:
7d:89:37:0c:d0:f4:f2:ab:a8:76:78:ed:53:fc:d6:
9c:85:08:55:57:7a:12:75:bd:36:62:37:83:02:97:
ca:e2:ea:b8:06:6a:88:a8:f9:ff:a0:9e:f4:01:00:
7c:ea:10:ed:d7:70:e7:f9:53:b5:f7:56:44:eb:8f:
1f:de:18:e0:d8:bf:48:1c:67:b2:0b:dc:5e:35:a2:
b9:e6:d9:b6:d5:e0:b1:6f:67:02:d8:11:f8:99:13:
f8:26:a1:9f:a9:74:4d:71:cd:91:7a:98:7f:d3:5f:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3A:3C:A7:77:1B:27:A6:4E:71:65:AB:04:D9:33:30:B7:03:D2:BF
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:de:cc:40:d1:2f:08:cf:58:e4:0e:2c:51:a1:97:01:1a:99:
a9:cf:a3:17:4b:7b:92:7f:7f:e5:86:af:db:e5:b3:01:ef:bf:
7f:e3:c5:16:62:84:9a:5f:63:9d:71:8b:85:aa:d6:da:60:48:
04:01:c8:b3:f1:8b:75:58:33:9a:7b:40:a9:f2:b8:6f:51:9f:
1b:0b:24:04:6c:f8:63:8b:db:c3:96:cf:1a:02:fd:93:e2:37:
33:8c:48:45:66:8e:85:88:18:34:4b:1d:42:cc:00:25:ff:6b:
c2:f9:92:b3:fa:53:e8:60:8d:99:c2:fd:da:67:0a:d7:af:f3:
c1:5c:91:f4:32:71:b8:6e:c5:e2:00:b8:80:26:7c:c2:ee:0e:
06:78:b2:8a:78:3e:da:f5:0c:a5:b2:a5:17:d6:eb:e4:02:5a:
2b:b2:9c:9f:db:53:dd:d6:76:fd:2f:42:19:c6:2b:14:16:3c:
db:2a:47:e4:e5:e0:2a:c0:59:f8:79:a9:ec:d2:8c:71:5b:18:
5e:fd:4f:61:8e:11:78:39:fe:c8:a2:9c:62:66:92:10:85:48:
d6:8e:4c:be:e8:76:70:42:eb:1d:5f:d0:63:ca:05:eb:74:70:
d2:c8:9a:3c:84:6b:a9:bf:f8:a8:ce:85:a1:d4:77:c1:c3:97:
5c:1a:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client