Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json)
Hash identifier: uCqGK8EaUluWAaGLkC9aeJfDGOJIYV67deeyyQ4hJqw=
Subject key identifier: 68:EA:77:BC:2D:C7:3F:C9:BB:D5:08:F3:A2:AB:29:80:F3:E9:F7:E5
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 0194BD4EB23696AE97C25F2C45D2F17734A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
Manifest number: 1148
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: 05CufssDJG0pTAbK0ZW527iD2UU.roa (hash: BGjazq+URRQ8AjeY79SbxnXbTrLwkTMUsC+q970r9fs=)
2: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=)
3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=)
4: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=)
5: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=)
6: ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa (hash: 7IrCQhHl7e+sxv1qd9FACB7rpVFTzzOf7CaAsOq9lEE=)
7: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=)
8: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=)
9: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=)
10: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: 6OfA27rRwmtsxyil1zS6B3tgOf3wgebwJt1wiSQv2s8=)
11: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=)
12: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=)
13: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:36:96:ae:97:c2:5f:2c:45:d2:f1:77:34:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=68ea77bc2dc73fc9bbd508f3a2ab2980f3e9f7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:20:cc:bb:62:14:6f:d8:17:dd:8a:9f:7b:
74:c3:9a:61:aa:80:48:e9:97:1c:87:72:e6:1c:23:
af:d9:e9:a2:ef:8b:19:9f:9b:e2:34:92:9a:1b:b6:
37:85:7e:e3:de:be:ea:ab:87:0a:ff:ff:e9:c2:95:
a7:e0:e9:96:6b:8c:13:13:31:d3:9f:ec:6f:8c:d6:
4d:96:9c:a7:94:90:1c:03:57:78:62:54:99:f7:71:
3c:bb:d0:50:fe:f8:04:f0:1f:c9:fe:8d:72:63:6a:
ca:cf:28:a3:a5:4d:ab:2a:fb:a5:5f:86:e7:f8:ce:
82:92:24:c1:2e:97:18:05:a8:ba:89:37:15:21:36:
b2:0c:3f:f0:e7:fc:bd:df:66:80:ed:b8:00:21:8d:
62:c9:e0:b0:4a:3f:63:68:30:ee:6b:3b:2a:90:5d:
d2:d9:68:85:f8:b1:d4:49:62:11:be:b7:77:ae:71:
89:35:47:8e:22:e4:d5:7e:df:8c:4f:30:ef:20:63:
a9:ce:06:ff:61:bd:5f:5a:1a:a2:99:13:0a:fa:99:
7c:79:15:58:fd:1f:f6:bd:e0:e1:2b:3f:b5:ef:8f:
e4:ca:03:04:fd:03:2f:33:f1:b0:43:44:5d:db:41:
1e:2a:63:b4:4f:21:9b:84:1e:e7:70:bc:8c:f8:46:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:77:BC:2D:C7:3F:C9:BB:D5:08:F3:A2:AB:29:80:F3:E9:F7:E5
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c7:11:75:e3:0b:ac:c9:4e:17:eb:df:77:df:77:a9:8b:31:
bb:67:ca:d9:a4:ab:23:54:34:15:e9:df:a6:ad:1a:e1:06:d7:
b6:cb:a2:83:85:98:7f:19:5f:b9:29:f4:54:72:16:2d:20:2e:
42:2b:6c:41:59:62:2f:9d:e0:32:f0:94:ba:3b:50:12:ad:cc:
95:84:44:c2:6a:d1:4d:83:ea:b8:f7:c4:68:f9:a7:e4:a6:fa:
d6:6d:b2:39:c5:80:1e:a5:18:f7:ae:10:72:b5:df:8a:14:20:
91:7e:bd:79:0b:5a:93:c9:d6:2f:96:7b:a5:b4:c4:15:05:17:
e9:4c:94:40:5a:23:3f:af:7b:1f:52:a8:f9:91:94:99:40:82:
86:cd:02:e9:b6:86:34:cc:a3:46:ca:01:6c:0a:70:8c:a4:2c:
e8:26:08:a0:4b:f6:65:b0:04:99:27:93:95:74:d9:39:8d:8c:
f5:c9:2b:59:79:23:a1:76:0b:1a:7b:94:54:2f:84:3f:7f:5c:
fd:c2:b5:84:7f:4f:7b:4d:81:d7:82:c7:ea:db:fe:0f:44:88:
89:f0:b0:7b:24:f9:86:5d:40:36:b3:dc:fc:48:4d:0e:f6:ba:
80:e4:2b:f7:ac:6f:d2:44:17:9c:29:fc:b4:1b:31:b1:ae:92:
d1:c6:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:27 2025 by rpki-client