Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: s1aF3sdnheZJzayJfiUckMFwqxjM2lZ2J2nZxd52rfI=
Subject key identifier: 4E:97:40:BF:F8:84:5D:E9:ED:A8:55:36:CE:2B:7D:5F:16:49:C1:9F
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 0194BCAA39F83DEE1D460023599CDBB5B957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 0D2F
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: eRHs1mp/KyF3DwSz8vTBFi1PoGqAB3ebqzgt8Yag11o=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:f8:3d:ee:1d:46:00:23:59:9c:db:b5:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=4e9740bff8845de9eda85536ce2b7d5f1649c19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:46:27:bb:27:b5:15:a7:67:84:91:0b:9f:
80:0b:88:81:4e:d9:39:1e:80:ac:5b:87:14:b3:fb:
02:2e:db:ff:78:b2:a9:83:c1:e3:9d:1e:7c:63:ab:
41:ea:07:34:fa:7e:01:0a:fe:65:f5:19:e9:a9:83:
1c:39:aa:01:9a:b0:a4:e7:4d:f5:99:05:29:f3:2a:
9e:21:88:f2:cd:c6:05:21:6a:7a:e5:61:28:bd:75:
77:fe:d1:59:73:04:6e:ac:19:8e:4e:76:bf:89:8e:
13:69:54:f6:e3:79:71:ac:b1:bc:23:ad:ae:c0:b5:
86:15:f6:37:f2:5a:e8:48:fb:73:4c:32:40:7a:ac:
fd:9b:b1:2f:31:95:54:e2:6a:77:41:56:b3:6b:5a:
56:68:51:aa:8c:b0:75:fc:5b:d3:a7:f1:cc:82:01:
ae:ab:41:47:c2:13:8c:bb:eb:b1:e7:78:ae:ed:ec:
a7:c9:8b:90:44:b9:62:d5:44:48:81:3a:e8:bb:65:
0d:19:a0:60:69:6f:11:d5:5e:d5:c3:b4:43:bf:73:
20:1d:3c:12:8a:dc:83:22:df:18:8e:ca:d0:09:6c:
00:72:5c:fa:0c:4b:dc:a4:bc:bd:1c:bd:4b:5c:48:
62:95:b6:a2:10:ce:8c:9f:ce:df:af:44:2a:9a:5a:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:40:BF:F8:84:5D:E9:ED:A8:55:36:CE:2B:7D:5F:16:49:C1:9F
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e4:04:a0:d2:ca:4c:a7:e9:ab:b6:a1:2d:00:de:41:a9:b9:
09:33:1f:eb:29:6a:6c:82:73:90:85:50:1d:aa:69:62:b1:dc:
c3:bf:bf:e9:06:2c:ed:54:20:db:91:3a:9e:11:16:5b:ba:33:
24:b0:5b:29:15:bd:41:2e:7b:b1:72:17:2b:a9:87:9d:30:a0:
1f:8a:35:3d:d7:47:7a:1c:56:be:92:4f:73:79:23:4c:71:55:
dd:a4:38:3e:57:37:d8:04:da:9f:c1:9b:51:06:64:af:65:4e:
17:95:af:66:93:49:fe:23:07:71:50:f3:9d:91:28:ae:e9:80:
65:2f:e7:fa:4c:c4:34:43:cb:66:80:2a:0d:05:c9:fc:c8:86:
89:b2:df:36:97:0f:e5:e0:6a:67:43:fb:39:79:c8:de:11:e3:
aa:70:c6:9e:ba:e5:29:fa:bd:9e:eb:ee:5d:3b:0c:7b:06:23:
5e:0f:f0:cc:4e:ff:48:20:f2:f7:28:1d:be:f2:d5:96:77:07:
f8:e7:17:ce:64:f5:f1:8f:cb:a0:82:15:e4:9b:91:90:c0:e0:
80:bf:78:a7:6e:67:60:ef:6b:5e:d3:61:91:b1:46:af:1a:36:
16:0a:4b:27:9a:ee:6a:68:2b:2c:4c:b7:5f:f3:ee:5c:e9:82:
4c:bb:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:31 2025 by rpki-client