Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
File: d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft (raw, json)
Hash identifier: ie7hiGNiIqWvJgvDPpMlAcbEn3tSNBqhoHADVXH7R7Y=
Subject key identifier: 24:F6:D1:02:5F:0E:71:F4:D6:12:99:93:0A:71:49:44:E3:A0:9A:73
Authority key identifier: 77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08
Certificate issuer: /CN=779ee00dd8baa59f53384dd0277a50e8b9802908
Certificate serial: 0194BBCE0CA53C69E6DEA1BA8F5FA0045EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl (hash: yJBefF8rpRbS48F7ZZm5+jvwXjIE3wCNGz9B6yHeI6o=)
2: sxbHoHimI0Vr0EljvQZ9JY4CO3A.roa (hash: xkyWQBZUM5YrjIeddGIa+ZKyCDrkqNywzvJP6lv4kKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:a5:3c:69:e6:de:a1:ba:8f:5f:a0:04:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779ee00dd8baa59f53384dd0277a50e8b9802908
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=24f6d1025f0e71f4d61299930a714944e3a09a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:0e:1b:98:a3:7f:78:e5:50:29:fd:d9:0d:
90:86:1b:03:cb:6b:76:7a:ef:f5:1c:1f:0d:96:e4:
52:19:78:5d:55:59:a4:9a:79:2c:77:6f:0c:d8:16:
02:d2:48:22:89:20:69:96:2c:c1:48:c6:eb:8c:a2:
f2:df:54:16:c5:c0:8e:47:81:42:86:64:12:5a:1a:
3b:f8:cd:fc:94:e8:33:cc:87:ab:77:25:d6:a1:ed:
22:78:f1:2a:7f:f3:7c:2f:a0:ba:37:23:19:36:6a:
13:2b:fb:d5:30:9d:8f:78:fc:96:c2:38:4d:4f:bc:
67:38:e6:8b:37:b4:b8:0c:59:19:dd:54:e4:d1:58:
b0:b0:0d:9c:e5:51:fd:e1:3c:c4:f0:87:4c:38:dd:
f5:4c:45:35:c3:f6:96:b6:04:f1:b5:e1:89:b6:6c:
c0:9e:a4:0d:19:5e:46:f9:ad:b4:e8:5f:0d:4f:ee:
2e:5b:36:c5:aa:16:ce:50:7f:37:0f:7e:b4:5d:49:
7a:72:71:73:67:10:51:8a:82:ab:78:08:52:58:da:
b7:c1:c5:85:02:e4:f8:f7:4d:7e:26:3d:1e:89:0f:
31:b8:d9:4c:a9:fa:c1:31:ab:a2:5b:bd:e4:60:02:
a6:54:85:e1:b5:97:7d:87:19:ad:7a:dd:0e:79:e6:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F6:D1:02:5F:0E:71:F4:D6:12:99:93:0A:71:49:44:E3:A0:9A:73
X509v3 Authority Key Identifier:
keyid:77:9E:E0:0D:D8:BA:A5:9F:53:38:4D:D0:27:7A:50:E8:B9:80:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4a4b66-4845-4007-a6e0-10693881dad8/1/d57gDdi6pZ9TOE3QJ3pQ6LmAKQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:66:ad:02:b2:e2:f2:c9:b4:51:4e:1f:63:6b:a6:f7:52:
f4:35:99:f7:7c:23:58:c8:6e:4d:04:e2:71:82:03:a0:c2:85:
85:b6:55:9c:c0:5e:62:db:57:fb:2d:c8:aa:0a:0e:99:a3:2d:
ff:82:16:24:a0:8e:2e:2a:83:51:e1:ff:d1:af:a2:0c:1c:59:
34:91:20:2e:01:aa:cb:06:0d:a6:5d:b0:3d:8f:5c:a5:92:8d:
4d:7e:7a:b2:cd:44:79:de:ab:8e:3b:d1:5d:b3:b7:d8:52:c8:
cc:f2:ce:f4:dd:49:94:1e:6c:5a:d2:f1:dd:4d:71:b4:8f:d1:
98:1b:be:dc:13:a8:cc:84:fc:e3:78:04:1e:03:35:cb:70:bd:
30:1c:a3:f5:97:c5:e3:46:d3:bd:a8:50:45:5b:61:ff:c7:fe:
54:c7:d4:cb:f8:1b:e4:0e:f6:dc:cc:20:41:97:a8:9d:18:57:
11:76:4e:11:37:ac:6e:63:b9:54:60:cb:60:79:0e:1d:c9:07:
9c:ee:2c:3b:23:22:9e:e0:76:af:cf:02:4f:c2:1e:ae:da:81:
f6:34:fb:f2:25:73:78:90:a6:75:8d:11:fc:98:5c:c9:e3:58:
92:e0:5b:c0:bc:36:99:33:67:1f:f3:c8:00:d3:f1:db:a0:e9:
91:0a:14:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:17 2025 by rpki-client