Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json)
Hash identifier: 4zanbO3Sa8mjQDKTq6Hr1kZlucUIXyDClBTugPeZoX8=
Subject key identifier: 47:0B:09:79:43:B4:D5:56:BC:5B:93:EB:CE:CA:73:93:E5:52:2B:6F
Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Certificate serial: 0194BBCE81D6864EED680824A2C124572AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: cKLVURSgkoMYO4wy8vne_qwgRmg.roa (hash: SnmmNcbbOM0qBXdozd7WzP3UhHfxrlR5ILW9dCCKUpI=)
2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: Vh2zw7yEgno9A1QqsTseDIaIJfYFSKfwn+4WeRx3lM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:81:d6:86:4e:ed:68:08:24:a2:c1:24:57:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=470b097943b4d556bc5b93ebceca7393e5522b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:0e:f5:4a:49:c1:2b:5f:f7:be:c4:95:44:
39:4f:d4:e9:af:a1:59:8d:5d:85:75:22:7c:ef:de:
b2:7e:c8:c5:1c:3d:68:d0:d6:3c:b2:95:97:25:f3:
d5:21:cf:61:81:18:11:c6:86:c4:a1:46:e9:39:fd:
53:85:17:b7:f9:c2:bf:b6:d2:cb:09:ec:98:85:18:
36:14:23:18:fe:2f:10:9e:fa:c9:22:35:3a:15:fe:
66:3b:49:ee:bd:1c:79:37:24:ee:57:3a:1e:4a:c1:
a7:b1:cf:7d:88:31:ba:f0:21:75:f7:d4:57:87:fd:
1f:62:8f:38:fe:98:18:ca:47:26:c8:a7:5e:be:fa:
53:42:74:d3:93:99:0e:58:61:0e:4e:a6:be:cb:81:
ca:6b:47:ac:88:87:71:c3:bc:00:17:5d:bd:27:0f:
22:bd:67:3e:9c:c9:25:5c:4f:48:79:d0:b3:cd:0b:
64:40:5d:4c:af:76:3e:96:d3:61:3d:e8:1f:e5:06:
fe:09:10:94:6a:5b:92:5a:10:2a:8f:46:48:bf:d5:
c8:53:5f:be:40:f0:f9:52:79:1a:af:47:f5:4a:01:
44:b2:e7:84:e4:5c:af:8f:5d:cd:9e:29:98:5b:25:
6a:d7:f7:74:0c:ba:14:3c:28:f6:c6:0c:fa:24:94:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0B:09:79:43:B4:D5:56:BC:5B:93:EB:CE:CA:73:93:E5:52:2B:6F
X509v3 Authority Key Identifier:
keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a9:03:56:de:d1:1f:01:ec:57:65:66:8f:a0:91:ec:ed:5d:
22:b5:87:5f:06:cf:a8:31:d4:c7:02:f7:22:56:2b:00:2d:95:
f1:e9:14:1e:94:39:b4:4b:34:c9:0a:0d:e5:7c:1b:2c:2b:f1:
b5:ea:65:11:92:c9:88:47:a9:f0:0c:6f:91:0a:80:fb:74:5e:
be:69:09:3f:02:8a:09:ae:19:a2:a2:fa:dc:dd:73:fa:64:78:
d5:da:74:a2:b2:df:ee:c7:e7:8b:ef:7e:84:0c:3e:00:b4:b4:
1a:51:5a:f3:c3:53:fe:29:7e:4f:5d:b7:1b:af:af:65:b2:df:
d7:2a:eb:b9:fc:67:1e:7e:a5:c2:e5:54:0f:05:02:33:90:81:
b1:d2:68:84:0b:3f:3b:21:16:fd:db:d5:26:3a:a7:03:46:4a:
8a:8d:50:c7:cb:91:fa:66:65:c0:41:02:e1:c7:4c:65:2a:36:
4f:13:1c:d7:1e:63:f6:a8:41:53:ee:bb:c6:3c:8e:d8:e6:f6:
76:6a:44:c9:56:07:01:af:8d:02:7f:dd:cc:8f:8c:d3:5c:0b:
94:c1:68:81:5f:95:1b:4e:5c:59:20:77:96:2b:5c:24:4b:66:
50:72:23:f7:ce:bc:07:19:7f:55:5c:4c:7f:95:e5:d9:a7:43:
d3:0e:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:09 2025 by rpki-client