Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: FmibT1Emrt5WUpSTKXCO2QVxDLY2G4A39yFT1UoshEw=
Subject key identifier: CC:0D:8B:2F:A4:BF:DF:32:16:89:93:80:72:3F:F9:F7:0C:53:19:C4
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 0194BD857444FCEA3A7E44B54629ECC83C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 98
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: BAA8rLPTx/VXZTKmepN4F8gUM3wnkuPB7SMJoaxix78=)
2: nHio7uNF-gJsASyGNozixn0XJIM.roa (hash: jcd5sjivp19XVsrsVA1XbLT4Ewz4dljsdil0kUZsn2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:44:fc:ea:3a:7e:44:b5:46:29:ec:c8:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=cc0d8b2fa4bfdf3216899380723ff9f70c5319c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:0d:9a:9d:97:70:63:3b:9d:9a:f3:3a:ec:
0c:83:6c:fd:71:20:2d:e2:79:64:dc:1f:b5:35:ea:
64:63:a5:59:0a:47:66:ba:15:3d:dc:f3:fc:38:3a:
fd:b9:01:8c:a6:e7:66:7f:c9:bc:53:0d:e8:7a:40:
34:ed:bf:27:f1:a6:92:a9:8e:b1:d9:b9:0e:1f:13:
1c:dd:40:ec:a4:1f:ae:65:89:4d:fc:9a:7a:de:d8:
c2:4c:f6:68:88:c8:b7:ea:d8:11:88:a8:d1:31:c5:
db:fc:2b:bb:d6:72:f5:04:a0:8d:af:17:44:c4:48:
1c:58:18:2d:83:b0:10:e5:5a:3a:ff:52:8c:2c:32:
fe:e0:9b:f6:01:95:c9:ce:c8:f5:e0:61:71:88:a0:
03:c8:8a:9b:ed:c0:7c:da:f1:e9:9e:0e:86:a9:8c:
9e:b3:6e:8f:05:15:3f:b7:7a:62:35:7d:47:c7:6b:
b5:ae:40:24:2d:a3:9c:ab:a8:cc:bd:91:1f:e9:0b:
f6:59:81:c9:b2:e1:36:ee:1d:0f:3d:e0:89:a0:56:
0f:34:25:89:fc:62:44:29:00:96:e1:1a:0a:56:bc:
dd:a6:84:f2:25:a6:bf:be:7c:3c:6c:31:83:0a:89:
43:4b:f8:e1:2e:3e:4c:a8:1a:0a:a5:20:dc:d0:d7:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:8B:2F:A4:BF:DF:32:16:89:93:80:72:3F:F9:F7:0C:53:19:C4
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:26:97:9c:a1:1c:26:c7:85:54:2d:bb:ae:16:de:58:a9:43:
bc:16:8e:7a:c9:54:5b:45:1d:04:18:94:1d:44:37:92:bf:04:
59:72:b9:e1:ac:8d:18:8e:77:e3:61:df:61:48:da:56:40:ec:
52:82:9f:ac:48:a0:98:8c:12:da:0d:37:a5:56:41:70:50:93:
ed:d4:fe:20:d6:21:b1:64:c1:3f:e2:28:76:de:f4:fe:dd:43:
3e:33:a8:6f:70:04:72:8f:ef:b7:6f:11:73:c6:3e:1f:21:f8:
57:1b:2d:bb:67:10:04:79:15:4e:38:d0:d5:a1:22:26:79:f2:
d7:32:cf:0d:c3:1f:6a:d8:fa:53:3b:34:36:e6:46:ba:cf:7a:
a9:bf:1a:c4:2b:4c:e6:f0:8c:46:d1:9c:df:87:b2:db:d2:4d:
1f:07:62:56:0a:8e:6e:84:b9:e1:77:b6:48:35:80:d2:1e:75:
09:72:f2:d1:9f:ae:84:ff:04:0e:2d:56:4b:29:c7:0c:38:69:
95:49:ac:45:19:db:f2:b7:a5:62:f1:b2:3a:f6:9b:9c:c2:51:
99:31:09:3c:45:20:f8:ef:ef:e0:5f:be:b1:b8:e7:51:68:b2:
3b:bc:97:a6:91:d0:86:b7:03:01:fb:4b:c0:fc:34:7c:98:b4:
34:1a:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:02 2025 by rpki-client