Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: bOQKoyNpWOxEj2YhI0Ub4CPWBlCBxfDvMIrGrhhzOi4=
Subject key identifier: 04:83:07:3C:BD:2B:01:49:1F:CF:1E:C0:51:B4:48:9B:8A:18:2C:36
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 0194BCA9E3D18DD98B00F2C37623D929A404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0934
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: c7zKzFWEYAOxqIAVkriFM+jbAKxiY+0Vc37g1Owq9q0=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e3:d1:8d:d9:8b:00:f2:c3:76:23:d9:29:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=0483073cbd2b01491fcf1ec051b4489b8a182c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:61:ba:28:b0:8a:5a:6f:d3:45:e9:76:ea:
7f:55:6b:8a:09:ae:81:7a:e3:e4:d2:45:69:c9:fd:
98:9b:9a:c5:f2:96:c8:2c:54:42:93:3d:7b:13:71:
5a:b0:95:8b:cd:73:c2:bb:37:3b:83:2a:6a:1c:4a:
e9:57:04:ca:cb:59:15:62:29:d2:52:a5:61:6b:6c:
90:38:0b:20:fb:d1:e3:df:dd:05:28:6a:47:0c:1a:
d8:e2:81:dc:c0:8c:e4:0c:a8:22:c2:20:c1:dc:c7:
f3:2e:62:2b:66:02:16:98:bd:ff:b3:95:1a:94:78:
56:78:16:53:7d:2c:cd:52:6e:c8:a7:99:27:b6:68:
b2:fb:71:de:2c:ed:a4:0e:78:6f:1e:8b:e0:5b:56:
90:ea:f2:3b:cd:03:3f:d5:55:e7:31:97:8f:47:3a:
12:10:86:e1:36:d8:28:69:02:58:6c:f9:be:62:b1:
ef:e3:3d:0c:dc:ad:fd:7c:e3:b3:bd:4e:5d:34:26:
92:90:17:29:68:59:6d:8e:d3:da:23:4a:a3:eb:21:
f8:75:dc:22:95:15:7b:03:d4:53:77:b0:ba:37:83:
c4:e8:b2:4f:c4:b1:3d:77:4a:4a:d5:00:e2:f6:f9:
a0:2c:b0:d0:f5:6f:da:f7:2d:e7:85:c5:eb:56:30:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:83:07:3C:BD:2B:01:49:1F:CF:1E:C0:51:B4:48:9B:8A:18:2C:36
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:ad:51:9d:80:eb:fe:f3:09:08:41:fc:2d:dd:66:bc:c9:
16:19:1f:91:db:81:eb:f5:73:78:89:4c:07:b1:22:df:17:c3:
73:93:d7:1f:17:3a:33:e0:dd:c2:e5:b9:76:ed:d0:44:b9:46:
98:4b:70:c7:c6:13:97:1b:1e:1e:98:94:c1:ae:73:43:f0:62:
a9:f8:ac:32:e7:7d:a5:6e:07:cc:a1:ec:ce:12:0a:7b:91:11:
92:ef:6b:07:58:34:db:4b:00:70:77:eb:b5:b1:dd:e5:27:50:
61:3f:72:87:4a:8b:9b:dc:fd:34:7f:fe:59:b8:5d:b4:2a:da:
1b:0b:a0:f3:16:63:fb:49:38:6c:41:f2:c5:e2:bb:fc:b0:08:
70:0f:cf:5f:06:56:5d:f6:0e:51:9e:7d:d8:59:62:c9:83:2f:
d9:82:8f:15:88:28:c5:a9:6b:67:9a:81:98:ce:49:42:4a:6f:
ad:92:33:e4:34:54:b6:6b:db:20:ff:ef:77:c7:32:7c:4f:85:
1b:10:2a:fc:51:ae:9a:c2:f4:84:cc:c1:26:cb:57:87:08:bc:
81:0f:0b:4f:b5:5a:14:a4:21:3c:50:fc:a4:4d:eb:af:93:1c:
e0:e4:f7:b4:fa:51:9f:5c:a7:da:36:52:ce:db:7b:ad:58:f6:
1e:e3:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:16:07 2025 by rpki-client