Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: BNNdd8egu0n0qGXG6L2iKV6OhiuCLA8/cXqAC2X8NEk=
Subject key identifier: CA:1B:E1:52:E8:D1:A5:CB:F5:57:3D:B1:7A:DA:B9:4D:B6:90:69:EB
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 0194BBCEAECE18A37658FB85CA05FEAB150A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0378
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
2: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: 81cm95v9z5gHkWb/nAgghCwOWkyj4yNiTCxEErvUadw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:ce:18:a3:76:58:fb:85:ca:05:fe:ab:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=ca1be152e8d1a5cbf5573db17adab94db69069eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:4d:5f:60:4c:a4:73:4a:d3:af:aa:7b:f4:
87:b3:32:34:df:40:d1:0a:da:a9:15:4c:d2:d1:b4:
75:db:bb:13:31:c0:d7:86:19:98:3f:79:9f:8a:73:
27:25:8d:67:10:8d:87:ec:31:fe:d7:fa:18:0c:b2:
4f:68:03:54:68:61:60:0f:78:f8:e2:91:9d:1b:3b:
7d:63:00:91:4b:a8:b7:bf:49:b9:25:46:dd:27:a7:
e2:a9:92:0f:ff:0a:46:8b:6e:58:32:e6:5e:bf:32:
4b:08:6d:0a:89:dc:24:93:3a:ef:7d:74:41:fb:1d:
41:4d:3a:39:66:c3:a1:b8:4d:b7:c9:fc:48:8a:47:
58:ea:6e:25:60:7c:a3:2a:3a:c7:63:b4:56:be:12:
11:d2:e8:fc:5c:4d:b0:f4:cf:54:9e:a8:c1:c5:cf:
66:fd:dd:f5:62:e3:4f:4a:c2:26:29:35:6f:3b:3f:
78:98:e2:d4:8c:f4:9e:6c:8f:e5:f3:93:70:22:86:
e8:09:e3:b7:fa:2f:ba:d1:f9:ca:f2:bb:0b:23:1f:
b5:ab:20:87:77:5e:67:bf:d4:8b:40:85:98:11:30:
6a:53:f8:c9:93:d7:2c:dc:03:cd:a7:32:50:87:d3:
83:87:a2:32:b0:5c:c1:9c:06:e8:ba:ff:6a:1b:ae:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:E1:52:E8:D1:A5:CB:F5:57:3D:B1:7A:DA:B9:4D:B6:90:69:EB
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dd:33:e5:79:62:8f:94:ab:25:ba:2f:b7:79:40:4b:7c:df:
6e:69:01:be:4c:3d:a6:d6:14:ec:64:0f:83:fa:0d:a2:35:f7:
1a:2d:37:b7:09:26:8b:84:17:b8:e8:71:84:58:1e:35:3e:74:
15:bd:3d:d6:81:3c:3b:e7:c7:3e:c8:e9:ec:73:17:5a:c1:2e:
28:eb:01:93:16:36:8e:cb:61:c8:80:19:fb:d3:41:dc:ee:44:
d3:84:ef:23:4c:9a:da:2c:87:fc:2a:5d:95:2b:9f:53:e7:9d:
00:07:d8:ba:5c:c7:fc:84:d5:54:ba:56:c8:94:68:f9:f3:30:
61:7c:0e:c0:a9:37:16:fa:84:fd:f4:db:fa:1d:49:4f:63:70:
a1:c0:bc:61:88:78:51:39:46:5d:32:72:7a:bb:b4:bb:3f:c4:
0a:3c:e5:f8:17:f5:61:a4:17:93:17:64:f1:bc:63:e0:68:bb:
9b:2a:7e:18:d2:27:49:c0:a5:f3:02:af:f3:81:ac:7b:ab:58:
6f:bd:d4:26:10:1f:09:be:83:60:fb:81:ed:12:e2:b1:d6:3b:
72:86:86:24:af:44:50:b8:44:61:de:e1:18:bf:7b:0a:74:78:
70:0e:a2:d2:fd:a3:ca:ed:da:ed:33:69:b5:90:6e:85:8e:de:
78:4b:e8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:24 2025 by rpki-client