Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: DyKfuD060Vg7Ezpdb7/K/+DT6FbbYAaSL8t/SZzXkKI=
Subject key identifier: 57:1D:A9:D9:89:B1:FC:60:17:CF:18:FE:B5:AB:54:4E:96:CB:5C:F7
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 0194BC3C558BE7D0FBE3A83F489C2FCB190E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 1315
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 1-9Xw-f0nG_vBoFqkQWYYVhrXaOQ.roa (hash: x800ct6/X3EmID3N4yS/h3J8l59DPbBfkE8AT6PGI1Q=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: J4QuIFpcwUZratSdFO3s1XeJuxCcBOp5R+oaYAc8EmE=)
3: DLsbQslMWMAA8m5x5xT2CbKj_PA.roa (hash: BA4GEn1Aa+rFpkRZJ9HDbAjJajVs68qZDjkbK7NP/Xc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:8b:e7:d0:fb:e3:a8:3f:48:9c:2f:cb:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=571da9d989b1fc6017cf18feb5ab544e96cb5cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:9e:a2:d9:d4:95:64:5b:06:98:c6:57:d7:
6c:1d:9c:02:66:52:63:c5:33:6b:ea:b9:89:d1:12:
f3:07:8e:d9:47:18:81:dd:96:2c:83:d8:b5:be:18:
9b:73:c4:da:9c:33:fe:0c:d4:a1:b1:f3:2d:df:49:
6d:e6:02:14:8b:bf:15:ec:93:ba:a5:11:1f:49:13:
c3:3d:1b:48:f1:f0:48:11:18:c1:94:e9:84:12:66:
da:79:3e:26:08:d3:4d:d5:73:df:b5:be:42:96:76:
aa:42:17:8c:df:87:4e:08:fb:ef:e2:ba:29:bd:c9:
60:ae:8f:a1:17:d7:2a:21:36:c7:83:51:3b:7a:aa:
50:93:dc:f7:b0:9f:24:79:a9:ce:48:c2:29:6c:fa:
f0:74:92:f8:14:7d:20:cd:1d:3e:0b:f8:05:f2:f3:
0e:30:d8:69:51:d0:62:f8:03:4f:01:fb:cd:3c:6b:
b9:3a:c4:c2:c7:6f:81:2b:52:d9:26:3e:ed:f7:bb:
58:fd:f5:6a:25:43:cf:a2:eb:26:a6:64:77:34:75:
7c:23:8b:7b:f8:84:87:84:f2:57:9b:fd:3e:97:1a:
b7:9f:95:04:37:cc:f8:c1:c8:f1:04:96:68:7f:68:
df:d8:13:28:73:5e:5a:fb:e8:d3:be:fa:ce:cd:47:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1D:A9:D9:89:B1:FC:60:17:CF:18:FE:B5:AB:54:4E:96:CB:5C:F7
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c9:f0:9c:78:88:4d:67:07:e8:00:db:46:42:bd:17:2c:25:
4b:50:61:68:b2:50:a6:91:51:e4:85:62:bd:e7:0f:11:92:d5:
ac:c8:5b:cb:f1:35:4f:e2:fe:85:38:ea:20:67:ad:78:ed:6c:
6b:d8:65:ae:81:b1:db:aa:2e:1c:f8:01:c8:0d:3c:6a:ef:b5:
17:65:0f:ba:41:96:5f:4f:71:45:f3:eb:1f:e0:cd:90:61:d1:
bc:dd:79:e4:1e:30:cb:ab:22:ec:39:d9:c3:6e:65:f3:e6:08:
14:e8:98:d5:69:a2:7c:ec:92:9a:87:7a:d7:e4:fe:18:c0:4c:
1f:ba:fe:95:e3:ae:17:24:ae:64:82:b2:3f:fd:fc:db:73:31:
96:8d:9f:0d:1f:56:6c:4a:bc:b4:00:d2:2a:a7:22:1f:27:19:
d1:4a:1d:de:78:df:0c:9c:8d:a0:ea:12:f0:d9:8d:5f:bd:b2:
f6:fd:3d:da:ac:00:19:2e:a1:bf:54:de:d9:65:2f:67:c2:48:
93:54:a6:87:fc:83:a4:ff:8f:54:a9:56:92:81:48:33:be:5a:
8f:85:dd:3e:21:b1:7b:43:af:f8:cc:01:be:af:58:f9:c7:cf:
51:a5:4b:f6:90:23:74:d1:ed:4f:60:57:77:6f:c3:29:a3:64:
3f:eb:fd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:08 2025 by rpki-client