Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: X4ihmaScx4QE/7vskWZftVf6dfUC1ifmjOVRsaEfXes=
Subject key identifier: 15:6B:8D:96:75:7D:D9:BA:08:40:75:B8:54:2C:2A:45:52:CF:E1:DF
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 0194BD176AADE06A62050B79247737A1C903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: iobOCeHYk3Xf1+HYB8A7FBg6RJbJTP8zAcNX0dgn2ts=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:ad:e0:6a:62:05:0b:79:24:77:37:a1:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=156b8d96757dd9ba084075b8542c2a4552cfe1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:60:73:8c:b7:84:59:3e:b3:ee:20:eb:1d:
10:c3:47:3e:df:b2:45:5c:7c:5f:0b:01:7b:52:86:
aa:60:00:39:78:fe:bc:40:c7:ea:bd:db:6e:18:37:
0c:fe:12:f2:2a:0e:3a:60:94:f2:88:c9:2d:18:01:
31:41:69:e9:b9:4b:48:89:c7:35:56:db:4c:42:a2:
ae:ba:d0:19:99:73:08:5c:35:63:a5:7a:9e:c4:7f:
48:e9:89:7b:0d:8d:4b:0c:d9:72:5f:a7:bb:d9:a0:
cd:13:47:b8:03:3a:5e:fa:2a:db:ad:e2:25:7e:1d:
82:be:96:0b:fa:0d:41:ca:f0:8f:f9:8a:14:8d:28:
28:e7:1f:61:6e:b8:aa:60:8c:72:40:02:e6:85:bf:
78:0a:3d:01:b0:19:ad:50:95:ae:ef:21:fd:65:70:
63:14:78:be:57:27:f2:9d:b2:61:6a:f6:1c:8a:96:
76:bc:72:78:69:88:a5:5b:42:67:f5:2f:53:e9:b1:
4e:fc:dc:06:22:db:51:6c:e5:2a:1c:e9:64:e0:68:
c6:1c:4f:8e:a2:ed:e2:e7:f4:9d:4b:15:45:2d:69:
b6:bb:0e:a7:5c:bc:c3:95:2a:ac:64:77:17:fd:db:
25:1e:6d:31:f8:4e:be:4e:ac:3d:ca:7e:ac:2e:16:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:8D:96:75:7D:D9:BA:08:40:75:B8:54:2C:2A:45:52:CF:E1:DF
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:4d:f4:ef:67:90:3a:90:3f:f2:65:67:8f:1b:7e:b6:a8:
02:bc:f1:93:7a:e7:46:92:c4:fe:56:89:5a:37:09:e4:d9:f6:
78:bd:c4:28:c4:19:28:28:f9:17:e1:23:03:a5:71:e1:e1:c5:
b6:a4:9f:6c:77:9e:c8:74:1a:59:1d:22:b6:2c:24:74:69:ec:
48:83:19:d5:60:d7:5a:50:7b:37:08:da:ed:9f:91:69:36:b4:
81:aa:d8:9c:b8:e8:83:6b:fe:13:bf:8f:6d:20:fe:1e:9f:60:
85:53:1b:84:41:68:86:4a:3a:11:05:a2:f5:5a:75:47:3a:aa:
95:49:60:d9:78:50:cd:94:c4:0c:28:7e:01:96:b2:c3:fa:3f:
15:16:3b:b6:fe:22:c0:56:d1:31:a6:7c:ac:1c:c4:a2:01:14:
7b:2c:46:a7:19:38:17:89:ec:29:d7:62:2f:ce:4a:41:af:54:
24:64:24:d4:4a:50:ca:22:22:be:87:1c:44:b5:8d:f4:9f:22:
68:0b:cd:c1:a2:5a:6b:02:45:77:99:58:fc:b8:2d:1b:96:54:
db:bd:d4:d9:cf:8e:38:dd:b6:d2:f9:70:85:62:ba:97:a5:e4:
d8:12:0d:2a:e4:81:81:ec:94:dc:7b:17:7f:e2:62:91:fd:3d:
92:6b:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:14 2025 by rpki-client