Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: 4XcfwivzxagaIzL9rxkEzLdDmWtFYjmNmKW2uDaS29M=
Subject key identifier: 2E:D7:E3:01:39:D6:F7:34:8B:6E:C8:E5:C4:9D:6D:F6:A7:47:41:41
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 0194BBCECBE6CE7852452CE81EA080096503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: DcwQuhEJlUMR02QiHZ/7c2gwruGF2ho5e+FvxXO4Hdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:e6:ce:78:52:45:2c:e8:1e:a0:80:09:65:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=2ed7e30139d6f7348b6ec8e5c49d6df6a7474141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:fc:be:3c:82:ad:22:70:08:72:29:c9:44:
a1:6e:0f:44:84:7f:cf:6e:96:00:64:08:2a:bf:b3:
fd:8b:34:44:bb:bd:c1:f7:90:19:51:b1:9e:7f:30:
e6:2e:aa:bf:96:33:39:be:de:6e:6b:fa:42:90:b1:
74:17:e8:55:9d:53:27:eb:22:7d:c6:09:c1:cb:81:
2e:e9:e9:4b:4d:c1:0e:4d:6a:53:55:74:f7:c1:7f:
7a:09:e1:9c:13:53:56:4d:4d:6e:57:4c:9c:a8:c9:
1a:9c:ae:dd:53:aa:b7:61:81:de:bf:b5:a8:f7:ef:
db:09:e5:f3:b4:23:5f:52:ec:a9:6f:3b:70:f0:30:
45:11:ee:5a:05:29:f8:01:33:57:d3:a2:69:54:5c:
ae:4b:ee:61:da:29:c3:df:25:bb:5c:18:b4:78:b1:
27:fb:59:77:45:48:04:14:a4:69:e5:a2:e9:31:27:
25:8b:4e:b3:9c:8f:a1:73:e7:75:74:80:0c:dd:cf:
4c:c9:15:ec:3e:40:6b:01:f3:96:0e:f0:23:58:80:
21:ce:a1:e1:52:e1:93:67:34:33:cc:75:5f:2e:6d:
ad:3a:89:7f:0b:d5:85:9f:2d:8b:7f:5f:e6:9a:a4:
3e:d7:02:f9:1d:aa:82:62:13:47:9f:ee:94:dc:18:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D7:E3:01:39:D6:F7:34:8B:6E:C8:E5:C4:9D:6D:F6:A7:47:41:41
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:f6:b6:bf:6e:04:d6:05:f6:e9:34:80:47:d1:2d:e7:72:
f4:54:af:30:a9:c4:ca:cd:7d:f1:5d:53:72:be:b7:69:b7:39:
aa:59:d2:20:9b:85:67:3a:b4:ba:c7:be:f1:7a:02:cb:c0:55:
ac:ac:9b:05:61:16:18:f5:ac:ca:78:9a:d4:ba:91:71:a3:9d:
11:2d:c4:50:64:5c:05:24:4a:02:19:37:46:bc:bb:98:78:e5:
54:9f:77:4d:d0:16:67:03:d4:d8:14:76:b1:a7:59:1d:84:50:
70:e4:82:fb:48:e3:7e:87:78:7c:e6:26:f1:1f:76:32:73:a4:
08:22:64:12:2c:f1:c0:9b:30:d0:ad:9f:df:44:9d:ff:0e:c0:
18:ab:a0:2e:07:58:4a:83:a9:3e:0d:a6:df:13:6a:61:26:f0:
54:fb:77:97:ff:d6:ce:fc:e0:7a:39:8c:78:c9:b5:37:a9:19:
99:c8:46:76:c3:f9:be:e7:f0:1d:09:2d:7f:2c:aa:af:a5:cb:
c8:fd:b3:75:8b:8d:e3:32:25:8e:e7:88:85:d7:4f:5e:2c:e3:
f7:64:25:49:a9:82:90:b5:14:83:32:42:2e:63:9b:25:d3:1f:
e1:34:3b:6b:c2:1e:14:64:58:93:4c:b2:d1:96:da:05:3e:04:
02:df:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:53 2025 by rpki-client