Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: VcUSfVy/DLtrPxelP0N6BH0KvJD038OQiMxt++4tJiI=
Subject key identifier: E3:91:15:E7:6B:53:07:AB:44:C2:43:F3:B4:B6:C6:D0:E9:92:F5:F5
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 0194BCE08DDA5640F878AFECD1CA5797B3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 039D
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: tI95+unPVwKB6i+pYYB5n4aGMg/kh7FuFjQALZF7clc=)
2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:da:56:40:f8:78:af:ec:d1:ca:57:97:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=e39115e76b5307ab44c243f3b4b6c6d0e992f5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:56:55:86:8c:f6:2b:a0:87:ba:7b:c2:d1:
29:00:7e:29:79:09:ea:f4:c1:c3:65:fb:c0:e2:df:
e7:ad:1b:ea:1e:c7:a2:f6:38:8f:03:d2:3a:9e:5b:
72:81:6a:0b:73:74:85:f8:21:7d:ec:e4:36:f9:e2:
fe:ef:8a:64:db:ad:73:07:7d:5c:dd:98:86:77:e1:
b8:1d:fd:f2:1a:32:04:ec:6e:03:33:c4:1c:07:41:
b5:d3:5b:93:34:d6:88:8d:4d:18:8d:6d:ec:d7:fd:
b4:12:53:23:6a:74:54:bc:7e:1c:d5:87:11:2a:52:
d5:74:2e:28:7f:69:51:68:c4:f7:af:87:5b:d0:3f:
4b:22:cf:4b:97:a6:04:7f:ca:72:21:96:9d:36:36:
91:f1:ba:20:b7:a9:a3:8e:17:8d:82:da:56:71:8c:
9a:20:ea:70:bf:b6:3b:a8:f7:dd:60:48:86:5f:eb:
f0:ca:90:1d:dd:d9:03:03:b5:87:48:5d:04:39:32:
39:66:7f:32:44:0f:0c:83:f5:d3:6b:15:c5:f4:48:
7f:48:81:c6:bf:47:dc:99:26:6e:49:ca:93:18:b8:
38:50:fa:ae:0d:0f:e8:3c:80:29:ab:01:25:22:e8:
63:17:68:db:fa:b8:1e:57:c4:94:5a:bd:2e:e3:a2:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:15:E7:6B:53:07:AB:44:C2:43:F3:B4:B6:C6:D0:E9:92:F5:F5
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8b:35:d6:2b:16:aa:b3:3a:6b:c3:d0:35:5f:19:20:14:ad:
08:3c:e9:5a:bf:e4:fd:df:2c:96:34:74:72:72:04:14:62:f0:
a5:99:55:04:35:74:90:6e:ed:de:25:1d:7c:44:46:94:96:af:
3d:6c:42:fd:8b:de:4d:e6:9e:c6:e8:9b:0b:2a:3b:95:71:85:
0d:02:48:96:61:b0:b2:3e:a2:80:a6:30:30:68:24:6f:6e:ee:
df:c7:5e:61:1c:e8:8f:2c:d3:9f:60:1d:87:80:0f:6a:fe:ec:
d2:86:f2:ee:a9:da:fa:15:2b:68:93:ca:4b:21:66:34:41:70:
3d:48:23:12:f8:41:c3:89:30:0a:cf:30:3f:c7:3a:fd:b5:e7:
b3:56:bc:ef:9f:a4:b8:f7:a8:4e:2a:b7:52:35:32:cf:73:db:
65:11:bd:4f:a3:bf:0c:c0:6c:aa:96:e2:7e:38:da:ff:4b:a5:
9f:45:d1:6e:ff:4f:96:a0:e2:b6:3e:2c:b1:a9:6d:f4:79:e4:
01:c0:b6:48:5d:3b:fe:06:29:5c:4c:84:25:34:ec:3f:c3:e9:
10:7a:62:6d:d7:c7:53:97:62:d4:5f:3f:c2:99:06:dd:72:e7:
c4:cf:42:2f:2b:21:97:2b:a1:8f:b0:e8:31:34:e8:d4:1a:6a:
ed:49:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:43 2025 by rpki-client