Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft
File: DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft (raw, json)
Hash identifier: RwZNAw4SMIiXGRcQBNdt2awpM2KLrhgVWxGTjUc5La0=
Subject key identifier: 51:50:FF:50:0B:62:95:31:1A:B8:40:4B:A9:B8:C5:F5:FA:DD:68:CF
Authority key identifier: 0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
Certificate issuer: /CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Certificate serial: 0194BBCDD4F011191C27B30D4CD924FDA088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 9zQJ9SLHpZOxGpN8gASmtQ726qQ.roa (hash: Ia4hTbFd7OEUZaWYiFux0V0J9ALCLVr3OB4Kc2zAJQY=)
2: DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl (hash: yd3U97BWApjn/aed+bNJIMXou2g8WcGH2OFtwuiFKMg=)
3: ZkLv_XQEgaw52rYSulsr2y8Igl4.roa (hash: tDcB/QwMMljvZB24FUNAAeSbVrFgcyw1Ys7Eu3cgmPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:f0:11:19:1c:27:b3:0d:4c:d9:24:fd:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=5150ff500b6295311ab8404ba9b8c5f5fadd68cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:b9:22:f4:d2:6d:e6:a4:2c:36:72:fd:9f:
6b:c1:dc:a8:a3:52:7d:9e:9a:1c:ce:fe:5f:75:a5:
ae:62:8f:cb:7f:5e:b0:c4:f8:9c:10:d1:0e:9f:f9:
09:ea:32:f8:5b:52:2f:d8:9e:92:e5:d5:12:86:27:
90:96:7e:c1:03:b8:51:b8:70:b8:48:11:35:70:87:
d1:aa:55:ee:ce:bd:58:3e:2c:a1:88:de:ca:84:56:
47:49:1d:e6:a9:3f:c0:5c:3d:fb:4e:3b:b4:4f:a9:
39:a6:b9:87:37:a5:49:9f:63:d8:80:cd:05:aa:36:
a8:6f:66:05:08:45:b5:5d:e4:35:94:bb:cf:73:af:
9a:0a:0f:93:6d:62:31:c2:84:58:ab:b2:3d:98:40:
74:fb:cd:62:53:af:e1:4d:76:5b:f9:a3:fd:31:0c:
18:ba:23:ea:e2:aa:a4:bf:9c:a4:74:09:20:9c:22:
4e:df:cf:c6:ef:02:50:ad:f7:f0:16:72:ca:bc:cb:
ba:ac:bf:59:45:7e:c0:56:02:98:4e:9c:c9:c9:8c:
88:e9:15:33:f4:80:bc:04:06:68:b6:6e:d0:c3:c2:
bc:a8:12:42:d4:6a:68:f0:07:06:86:d0:34:f0:f2:
d7:aa:72:61:e4:ee:a4:e8:74:de:ba:37:9c:3e:75:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:FF:50:0B:62:95:31:1A:B8:40:4B:A9:B8:C5:F5:FA:DD:68:CF
X509v3 Authority Key Identifier:
keyid:0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ff:b0:a1:3c:d2:49:6c:70:d1:8e:e5:5d:1c:dd:ca:69:c3:
da:fa:f3:50:2f:1c:09:e3:96:28:4d:04:d9:d0:e4:47:10:a7:
9a:44:d6:9f:ea:76:7b:70:8b:f2:29:83:b7:be:6d:ee:d7:72:
d2:2c:fa:7b:0d:a9:a3:8a:de:a1:9c:2b:33:dc:c7:91:c6:7b:
16:54:23:74:cd:11:4d:ad:50:d0:1a:8a:d3:ea:34:b3:1d:aa:
f4:62:4f:d7:ef:ba:e7:4e:1e:92:17:84:b0:14:c3:29:db:b4:
c9:e8:fc:65:b1:ef:28:a5:f9:a9:4e:31:68:60:08:15:73:3b:
92:45:a0:58:a7:fe:c4:9e:b2:9e:76:10:4f:c1:7d:0e:39:87:
b0:3a:97:17:12:11:97:bc:d1:73:31:13:9d:f5:1f:a8:13:59:
2c:3c:1a:a1:46:8f:35:f6:24:a2:84:de:d1:5a:f0:dd:e4:2d:
c3:21:49:72:5c:52:6a:61:77:27:c1:c0:ae:59:df:23:8f:9e:
5f:28:9d:1d:06:8c:4b:c8:8e:15:06:53:b9:b9:fb:b7:4c:d9:
1e:29:76:c5:6d:f9:ab:66:cc:17:a6:f4:0d:91:62:84:d3:ed:
c1:60:33:37:64:3b:1e:fe:0e:da:4f:ff:9f:b0:fd:93:54:fe:
1e:a9:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:43 2025 by rpki-client