Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: gM60XgAuO0I9yA+n90zYfeYwHEjt9u38gNlgU1dIkaw=
Subject key identifier: 8F:11:FC:77:E3:AE:49:B5:10:28:73:6D:BE:28:6E:E0:15:62:96:45
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 0194BD85478D78B196830F554F7CCBD4547E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 045B
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: fne74ZG7QwTkjCgQMV/Qy30n4l2X1ePGKOjIc38LryI=)
2: dJjjOIsvcmwG1yw0BY5P71sFVUw.roa (hash: 71ssAltTmbpploHF43pU09n+JXavvKYPHb8mMd4Firs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:8d:78:b1:96:83:0f:55:4f:7c:cb:d4:54:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=8f11fc77e3ae49b51028736dbe286ee015629645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:c4:aa:ad:21:58:d0:b4:69:27:7b:ad:ec:
b4:57:33:08:75:a4:9d:36:57:c8:c7:19:4d:c8:ea:
90:a5:6e:f3:c5:75:d8:fc:ba:2a:4c:40:c3:b9:b8:
03:8b:ee:b8:5d:fc:e4:23:cb:92:ad:e1:71:74:7f:
65:5c:1f:e6:64:c6:2c:48:18:23:0c:42:45:2c:90:
a1:4c:f5:bf:94:48:b7:70:c5:1c:e9:3e:50:54:5d:
ed:21:98:ec:16:cf:36:ed:e7:1d:ba:59:11:e2:d9:
ce:ef:7c:2b:c4:b2:f0:8f:44:85:eb:eb:27:7d:3e:
a9:9e:4e:75:42:23:95:90:2b:eb:c5:27:73:9c:8e:
d8:0c:ef:00:bd:3e:79:69:35:da:63:96:dd:d3:a9:
92:fc:93:52:48:c1:d9:9d:ed:14:5e:ed:58:d7:e6:
c7:47:a6:07:9f:4a:ff:a5:b8:9a:8b:da:d8:a0:d7:
2b:6b:3c:67:ac:06:49:80:a4:68:26:c3:b4:05:f4:
ef:48:bd:2b:d3:2a:b5:91:87:85:a4:3d:fe:4e:5e:
1e:27:4c:12:d6:8c:3e:01:e4:32:ac:1e:34:e4:51:
14:ad:9d:7f:e6:f8:c0:24:ea:cb:9d:3b:90:3a:5e:
6f:7c:3e:d4:b2:98:d1:bb:78:90:8f:96:b0:5b:2f:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:FC:77:E3:AE:49:B5:10:28:73:6D:BE:28:6E:E0:15:62:96:45
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b6:7e:97:cc:cb:af:78:e0:c6:36:1d:42:5f:4b:13:bb:8a:
4a:c4:8f:40:bd:77:d8:7d:d2:fb:d1:c3:eb:b3:23:e0:e6:b1:
af:13:6b:07:b7:ec:90:90:3b:1b:d3:3f:95:3f:f2:1c:3b:88:
0b:c4:a5:cb:b0:e8:25:c8:74:31:2f:6a:1f:1c:d5:0c:a7:52:
c7:c1:57:f2:01:84:74:92:39:e7:fc:82:be:9f:ce:72:d5:5b:
01:ad:49:3e:f3:59:0c:b8:1d:a1:ca:60:13:f1:0c:bf:0d:7c:
e0:73:50:00:fb:06:a3:c2:0a:0b:e9:35:9c:e3:4f:0b:8a:a6:
70:f0:05:96:7f:e6:92:87:4b:20:0d:d5:97:35:68:07:8d:05:
50:b5:c4:43:d0:93:fd:7d:06:dd:e8:c5:bc:a8:c7:58:5c:72:
c3:71:70:91:3e:95:93:2e:9d:55:81:78:e1:ac:e1:88:30:94:
c2:53:d6:db:50:05:d5:e6:f2:13:f3:7a:c3:6b:27:f7:ce:05:
fb:2c:5f:1d:57:16:79:8e:2b:9c:09:55:7e:0a:d3:a9:4e:5c:
25:0d:ba:e6:23:20:0e:6f:80:14:c2:c4:1d:53:8d:97:dc:15:
fa:09:12:eb:f4:4a:71:ee:43:16:e8:46:c2:ab:11:eb:71:5d:
8e:0e:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:36 2025 by rpki-client