Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: jZ4nGjKI8iBnH76eZeQ3oRojxuWFzEf+MM31KFaqpxI=
Subject key identifier: D8:6B:91:A3:AF:9D:A9:D7:FC:89:AD:06:D0:DF:36:18:3E:4F:59:2C
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 0194BCA9AC1EF94D242EC9FD1AED52657EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (hash: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=)
2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: XmzZVxL2pN/FHy5aS6Ea1EFkPFCd2kZgiUL3zfnbvVw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:1e:f9:4d:24:2e:c9:fd:1a:ed:52:65:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=d86b91a3af9da9d7fc89ad06d0df36183e4f592c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:c5:4d:99:12:b8:67:35:42:71:f4:1c:8a:
6a:63:1a:97:b4:d8:2f:25:3d:32:a6:34:b2:fb:43:
1b:07:94:f9:83:d1:06:2d:4a:a9:ac:f1:30:56:34:
a8:27:60:04:25:bb:00:dd:66:0b:b0:82:91:11:45:
cf:f7:b2:fb:69:c8:b8:d9:fa:ab:a7:e1:1f:00:9d:
cc:86:70:07:41:86:62:6c:2b:1e:31:ef:dd:0b:63:
5d:e3:5c:02:75:c1:81:04:72:69:2a:c7:02:f3:b4:
1f:f8:fd:21:c9:e6:dc:b7:bd:c9:d2:db:da:9d:13:
71:29:29:27:93:3c:e1:c4:dd:3a:4d:20:7f:e6:90:
18:4f:02:82:91:1b:cb:4b:71:24:ef:30:22:31:57:
20:ec:e2:7e:66:3b:f9:d0:81:82:79:90:33:66:76:
96:74:9a:2a:38:ae:8a:f6:25:2c:a4:34:69:26:15:
16:b9:96:0e:00:3f:e7:1f:23:86:11:15:8a:09:ae:
4b:04:79:6a:df:c6:bf:e9:7a:c1:e5:62:bd:af:df:
ae:b6:d7:cc:53:65:23:20:3a:cc:a0:5c:45:a7:00:
98:27:e2:d7:02:fa:4b:29:f4:44:23:88:0b:a8:b8:
7e:58:40:0b:13:8a:f3:15:ef:87:a1:1b:44:48:98:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:91:A3:AF:9D:A9:D7:FC:89:AD:06:D0:DF:36:18:3E:4F:59:2C
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:49:a6:2e:2e:ba:9c:f5:ec:29:03:39:78:e1:eb:0c:62:f0:
be:f8:bd:1c:e7:ba:71:4a:9e:d7:12:70:89:e3:a7:9e:6a:9a:
f1:e3:4e:aa:cf:eb:d0:e6:46:a2:12:3a:59:3d:32:4d:74:25:
1f:40:81:29:b3:61:b7:32:12:13:7a:78:6c:40:8e:e4:fc:f8:
a4:ce:4c:10:12:ac:1b:c3:f0:d4:c6:08:5d:5d:e6:6c:ea:8d:
5a:f7:17:af:b4:dc:e3:e0:0d:c7:1b:1a:e8:f5:b8:d0:aa:a8:
1d:30:a2:f5:84:64:b4:be:d3:a9:37:13:9c:6b:cf:09:1b:30:
51:77:2f:c3:44:19:b7:d3:f7:cf:9e:84:48:0a:66:1e:dd:c3:
ea:83:ad:d6:8b:39:ba:ef:87:1a:39:67:75:39:ef:97:57:4c:
4d:4c:7f:65:74:c3:32:3b:1b:40:86:dd:85:e9:70:60:1e:8e:
24:0e:79:81:c2:50:a7:82:81:f3:2c:a7:c2:1c:61:f4:f8:4a:
ad:1c:34:34:19:a3:42:c0:11:6a:b2:94:1a:23:cb:01:43:f9:
4d:be:bb:7d:a7:6d:09:70:2d:b7:1c:1c:64:be:36:70:00:29:
da:79:44:f0:2d:cc:56:50:3b:2e:b5:35:31:dd:48:b0:4f:81:
07:95:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:04 2025 by rpki-client