Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier: P46k72qgztwrKAlkRrvgOKEL5guETFd7KvNuBp/mHdQ=
Subject key identifier: 74:74:86:11:93:75:63:48:94:A1:9B:6F:52:3C:AF:5C:D0:91:E0:EE
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 0194BD17D0CFFC1CA0545640AFDB83AED647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: puq90poRYjwd6M+QU7jfpZbveP07v97T2BeUAycUCaU=)
2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d0:cf:fc:1c:a0:54:56:40:af:db:83:ae:d6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=747486119375634894a19b6f523caf5cd091e0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:f8:1a:96:1d:aa:18:1b:b6:c5:01:e7:b4:
ab:53:9a:1c:94:54:cc:08:34:86:41:8e:52:79:d7:
5d:e8:9f:6c:ae:61:96:fc:4f:91:ce:11:85:64:0b:
e5:f1:b2:42:ff:8c:d0:d5:ad:7b:f3:d0:ab:6c:a0:
a4:7f:a0:65:10:f6:04:98:49:7e:de:9b:a5:71:7b:
8a:ec:83:4d:49:d6:90:54:2e:d7:6b:63:9f:d3:70:
c1:12:54:f2:5e:f0:bb:85:ad:33:ff:59:74:4f:79:
98:14:af:f2:14:80:14:46:6d:ff:5f:28:27:4f:9a:
36:cd:fa:62:b5:b3:ec:0c:23:34:15:55:88:e0:fd:
d1:fb:b9:1e:21:07:09:c6:b1:77:31:4d:61:e2:a1:
89:d1:b2:1f:de:2e:17:52:6b:28:a4:10:54:db:4b:
e0:04:70:59:c3:7e:0c:fe:9f:75:7f:4c:41:64:77:
0e:7c:cb:78:2f:9f:d7:13:e7:72:e3:be:f8:f0:61:
cf:b3:21:ed:8a:3f:1e:41:7f:c8:b1:6b:ff:ff:ba:
49:3a:1a:db:60:47:80:60:95:55:1e:b4:b9:a6:26:
2f:cc:a5:8b:87:87:f0:5e:51:ff:a3:65:3c:9e:43:
5f:0c:00:27:c1:82:db:9e:4f:74:80:ac:8e:0b:fc:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:86:11:93:75:63:48:94:A1:9B:6F:52:3C:AF:5C:D0:91:E0:EE
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d9:0c:52:e4:95:92:33:b3:6f:fd:b7:1e:5f:b0:08:30:cd:
e9:59:0d:02:d9:be:3c:22:98:b0:7a:49:95:8e:76:84:3d:25:
46:9a:b0:05:d4:c9:66:fa:b6:97:c5:54:cc:f7:bf:b3:59:85:
a5:c0:fa:e8:fa:c3:dd:53:07:80:b9:21:36:96:89:ce:30:60:
19:85:32:4d:67:73:0a:ef:4b:f6:78:3b:2f:e3:84:91:9b:81:
ef:2f:d7:6b:ec:b3:a6:4d:97:7e:c9:0f:de:f3:5d:28:3e:d4:
2d:fd:ed:67:c6:7f:5b:ae:19:d1:46:8e:c1:59:07:5c:43:47:
8d:7f:64:cb:54:8b:0d:cd:97:6d:ec:1b:04:bd:a1:ac:d2:9c:
88:41:0f:27:d0:e8:18:0d:cd:d9:9e:37:87:a5:5e:cd:2a:ad:
ec:85:92:2a:04:71:fa:c0:e6:eb:e0:c5:a9:da:3f:2e:b2:ba:
9a:44:c9:17:fa:f4:d9:85:d4:7f:f8:f4:0b:04:96:80:0a:29:
08:3f:71:29:13:f4:4d:2b:bb:7e:43:33:1c:c1:71:d9:7d:90:
7d:fe:64:9d:56:d5:04:7c:1b:76:57:17:cb:37:e8:45:52:01:
24:2e:fe:b5:7f:df:44:6f:6f:c4:6f:0f:f2:c2:1f:b2:52:65:
9b:b7:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:21 2025 by rpki-client