Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: RwOasdaQaz0Bz6Xs77icCGHxe66l3bDVCQ0QaGo2Zm8=
Subject key identifier: 3A:8E:BA:17:C6:A6:44:F1:D3:E0:77:30:23:A1:C9:B5:98:23:62:20
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 0194BC3C94F08E0F701642C84F01EEE0358B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: 05gFPHxvYy4stCSKX3vYpZt6o+FUdxChvW71QyixTEU=)
2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:f0:8e:0f:70:16:42:c8:4f:01:ee:e0:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=3a8eba17c6a644f1d3e0773023a1c9b598236220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:fb:90:8d:40:bd:29:c5:55:32:9a:f7:d2:
14:f2:df:f4:e5:0a:e5:fd:18:2d:6d:95:fb:55:e1:
95:ed:27:04:8d:36:47:b7:e7:c3:03:13:24:74:3e:
ed:9b:a8:1b:f5:60:8d:29:46:4f:6b:64:c3:a6:e7:
52:0a:6e:58:0a:ca:12:c9:89:6a:b6:82:64:c5:c5:
bc:75:89:f6:2b:60:a6:c2:e4:91:f7:c2:bf:91:70:
cd:9e:16:d3:db:18:7c:24:9c:bd:f9:a6:4a:7b:65:
f8:7d:59:54:59:64:33:6b:a5:74:2f:ff:1a:28:47:
db:40:e6:9a:6d:f7:b8:21:76:2c:1c:11:74:e5:37:
08:7e:63:b8:f9:fc:bb:59:46:ea:4b:df:af:fd:62:
63:12:a0:84:78:5f:3f:83:62:b5:f1:90:91:32:ac:
da:a6:9a:1c:5d:ef:a9:af:8c:dd:e0:61:4a:15:d0:
da:e1:42:83:bd:02:2c:23:33:6d:cd:87:bf:6f:c0:
28:33:b3:e8:53:2c:5a:3a:39:21:ff:e5:7b:82:82:
00:79:0a:94:20:58:5a:c2:e2:f4:eb:a0:fa:b7:10:
72:36:0c:61:d1:bb:d9:2d:f3:b2:64:fb:6b:39:d1:
3d:52:76:f8:1d:82:4e:0b:77:bf:ee:b3:7e:3b:9c:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8E:BA:17:C6:A6:44:F1:D3:E0:77:30:23:A1:C9:B5:98:23:62:20
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d8:d0:79:c8:ce:01:48:90:14:e4:97:71:d2:b3:97:73:74:
aa:02:68:13:dd:1f:df:28:1d:2d:09:78:17:0c:44:a8:e9:da:
1b:15:63:d4:7c:59:96:75:23:15:79:b6:f1:20:c4:ac:da:cc:
b0:b1:c7:13:e5:1a:da:a7:b8:73:23:da:45:66:59:1f:9e:31:
90:81:0c:3a:89:2c:63:4e:5b:45:5f:1d:98:fd:e3:1d:12:ce:
d5:d8:78:fc:1c:8a:42:36:eb:a2:18:1e:b8:22:fa:18:ad:26:
49:42:41:ef:48:96:13:f2:ed:90:5b:d5:5f:a1:31:cc:85:10:
a7:d3:47:b1:75:7f:6c:17:e9:ef:5d:4e:be:14:2a:95:b3:50:
ef:4d:9f:35:de:99:2d:fa:59:2b:a2:6e:34:d8:11:66:2b:5c:
59:6c:3e:a4:9f:20:83:ff:63:93:6f:6b:e9:26:7e:6c:c8:2f:
5f:25:07:b4:0f:9f:f6:b4:c3:d7:69:9c:89:42:d9:30:cd:70:
75:3b:31:e1:59:fa:a4:be:e3:0d:df:ac:48:42:6d:8d:f6:5e:
5c:16:71:bc:1d:af:c7:7f:c5:6d:c9:77:ca:f1:af:09:2c:44:
a5:62:47:25:7a:21:42:4b:20:23:11:93:1a:d0:ad:b2:15:f2:
c7:cc:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:53 2025 by rpki-client