Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: CixKdZFdULx22KoepC+zizaMCVAKoe/C4CWsM5eIxkI=
Subject key identifier: 69:A3:CB:6D:C0:89:21:F6:E8:32:18:E3:FB:BA:6B:B3:E7:8C:94:98
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 0194BD4E76E4E13C49D043D4ED6A3D412DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: 9sZ+HsWdw5egpKsuegqywuYs85+NnpNHkqVlWKnZR7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:e4:e1:3c:49:d0:43:d4:ed:6a:3d:41:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=69a3cb6dc08921f6e83218e3fbba6bb3e78c9498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:35:00:14:e1:f3:c9:64:52:e9:dc:5f:0b:
c6:83:ff:21:71:30:5d:55:3a:fe:e1:84:ba:b2:f0:
6f:30:76:f1:4a:7a:42:93:c8:95:3e:f0:36:23:c6:
f8:77:42:a6:82:5a:49:e8:af:ca:83:1c:91:be:0b:
75:07:22:01:9f:6c:e7:c8:0c:ce:86:44:c8:02:9c:
43:80:83:93:15:e0:d0:d9:3d:6d:07:39:fc:2b:d3:
f8:e6:cd:1a:2b:93:67:57:4a:c0:c3:6c:11:93:73:
85:bf:c8:97:2f:a9:d6:74:fb:f2:5d:fb:47:1c:f3:
39:61:66:62:38:f0:0f:57:5b:63:d8:30:83:da:18:
48:ba:d0:9d:a6:72:4c:f7:c8:a7:e4:78:b2:36:63:
31:53:35:bf:83:16:d7:18:3e:ac:76:b0:8a:68:cb:
6c:68:e6:87:6d:2e:17:6e:c8:d5:5a:a0:ff:f0:97:
52:4e:14:94:32:00:bd:d0:ea:51:af:a7:f1:41:7c:
b3:74:5f:03:46:cd:25:e8:5a:2e:d4:f2:38:96:55:
a4:50:9f:6c:82:77:0c:96:e1:8e:74:d5:75:21:b0:
00:5b:db:bf:88:04:e5:4f:9a:01:5f:ba:57:ff:d3:
0e:2f:0a:65:cd:56:a7:36:33:74:f9:23:82:8e:5c:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:CB:6D:C0:89:21:F6:E8:32:18:E3:FB:BA:6B:B3:E7:8C:94:98
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ec:bd:52:40:6f:44:cc:e4:89:b1:a1:bc:b0:56:9c:08:68:
11:96:3f:27:2c:ba:e4:9b:d7:09:eb:30:da:be:4d:3d:76:ec:
27:15:48:51:dc:94:7d:00:5b:31:be:7e:fe:cc:b9:7f:31:e7:
e5:fa:59:62:8b:4c:10:bb:11:01:c0:3a:21:a8:1f:1d:d0:7a:
a8:45:26:bb:a2:03:08:39:c8:25:18:02:92:54:ef:8b:ed:e2:
22:cf:6e:0c:92:df:14:66:96:ad:fb:57:62:7b:d3:50:f5:5f:
20:5d:3a:25:29:98:eb:a8:57:30:05:95:78:c5:07:bd:cc:61:
29:1f:b0:14:2e:bb:42:f7:aa:c5:8a:2f:0b:4f:9c:a4:df:7f:
9d:a8:6e:1e:14:e1:93:95:d6:0c:ec:24:45:18:18:08:01:c5:
11:12:db:8d:5a:b3:45:54:5e:5e:f7:c1:9a:0b:07:8d:ca:74:
1c:6d:26:af:71:ee:01:77:a3:39:ce:a7:ec:b1:48:1c:aa:1b:
fb:b1:13:2a:8c:06:98:ef:dd:0c:be:12:38:e9:3a:87:bf:e8:
f3:26:a9:d1:bf:e4:43:5e:98:c2:b5:da:e3:57:da:34:b4:c4:
a3:2b:c9:9b:80:89:16:77:8a:51:37:7e:6b:71:69:0b:f2:e1:
51:9c:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:08 2025 by rpki-client