Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
File: dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft (raw, json)
Hash identifier: lgaRz9YFC/5V5R1JlvZeEi9L2hhUASYs7fiGPWN9szU=
Subject key identifier: E7:7A:AE:A4:46:91:37:6C:B0:7C:C9:B5:B9:D2:8F:44:B6:50:28:49
Authority key identifier: 76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
Certificate issuer: /CN=76d47c234a8b92f31d3989cc42219f80c947da19
Certificate serial: 0194BD854116B074BF40151EF9D5F31610E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl (hash: Yk8U7EI7216UcpvbCowv77HQHrwdX29jl669FSlMaE8=)
2: yBW-am3EUBRx9O7vZzWxsexyVDc.roa (hash: 84nll77B7BpLcH7NgDygxbbVVF73lkH0GTZskrUTIoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:41:16:b0:74:bf:40:15:1e:f9:d5:f3:16:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d47c234a8b92f31d3989cc42219f80c947da19
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=e77aaea44691376cb07cc9b5b9d28f44b6502849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:61:2a:8a:c4:d3:62:da:e4:03:58:53:19:
2d:50:58:5c:8d:f5:40:f7:50:fe:7a:46:fc:b1:bd:
e6:dd:1b:bc:dd:64:99:63:a5:d0:85:48:77:2a:85:
fa:1f:c3:f5:8f:62:68:6c:de:fd:47:13:93:e2:ca:
f7:0c:7e:1a:bb:b7:f4:26:0c:49:4e:39:0e:92:88:
c6:6f:64:15:0a:b5:e8:9e:e0:6f:d8:a7:04:f6:3a:
54:8f:0f:b4:5e:73:d6:4c:16:87:62:4d:42:71:fb:
06:df:1f:c1:f9:b3:bf:c7:da:66:74:44:a6:2a:af:
01:d9:b7:48:79:c9:ef:f8:62:76:2a:70:eb:1f:27:
9a:c9:fa:bb:82:1b:49:5b:f5:5c:30:0b:da:44:8f:
43:8b:c1:3f:07:77:78:bb:a4:e8:b1:95:2d:5d:87:
04:b7:a2:cc:44:4a:39:f8:fb:9b:fa:e5:0a:4b:89:
e5:c8:ad:50:e2:82:ef:2f:e9:d9:8c:bf:e9:f9:0b:
ef:ca:40:cb:aa:64:5a:b4:b9:ff:6f:8c:5a:6a:90:
22:07:2d:84:fd:1f:1a:d4:86:04:6c:e1:72:19:f0:
38:97:f4:03:06:e5:2c:1d:e1:e1:72:af:39:f1:7f:
1b:2b:70:bb:10:34:eb:46:00:a0:0f:c2:be:1f:2b:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:AE:A4:46:91:37:6C:B0:7C:C9:B5:B9:D2:8F:44:B6:50:28:49
X509v3 Authority Key Identifier:
keyid:76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:95:41:d1:71:e3:bf:35:0c:1f:d3:9b:a9:a3:67:d0:a8:d9:
84:6b:94:51:35:0c:1a:24:f5:55:be:21:62:10:dd:66:e4:29:
bf:44:97:da:c8:69:fa:8c:23:d2:4d:a1:98:0b:fc:2f:d7:be:
2e:13:a0:0c:13:a1:11:df:3a:b8:8a:18:89:6e:03:76:a4:71:
e6:85:75:71:43:d6:b8:b0:0c:0c:3a:c8:a4:cc:44:f0:b1:9d:
4b:a3:b0:aa:81:f4:45:f9:0e:db:06:ac:7b:7e:f2:70:92:aa:
53:9e:e1:8f:27:36:7c:8b:d3:74:aa:35:47:a0:2a:9d:12:ce:
d9:9d:ad:fe:f3:8b:f6:0f:4e:42:d8:84:cc:4f:71:93:c5:a3:
b8:4a:45:c2:48:82:d3:7c:b6:d9:4b:81:32:37:0a:02:7b:36:
65:83:70:15:6b:65:a6:e7:af:fb:ec:e5:45:02:7b:1b:9e:00:
cf:28:27:f4:06:20:81:59:84:70:5d:f0:86:1f:30:d0:ed:3a:
2b:42:c8:86:4c:6e:f9:68:a5:c9:ca:87:85:59:11:83:34:34:
39:fc:3a:27:9e:bf:03:be:78:c0:a6:6e:49:78:b9:df:06:b8:
b6:06:35:13:a0:35:a2:1b:e7:a2:63:ec:fe:68:10:79:a5:01:
a1:00:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:30:11 2025 by rpki-client