Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier: Sil7vPauVccEjPNQMn1JobBQDGcsu0iP0h04xrG5/40=
Subject key identifier: 85:68:BA:C0:F9:64:99:96:44:D1:D0:DA:C1:D2:04:7D:FE:93:E9:C1
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial: 0194BCA9B431545D1E408792AC20A889D391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number: 0C23
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: S9cGjm1_FE5PT4vUzDVGwHhUU8I.roa (hash: 69AJiJKNUyPoiJ1x84aJesWdv5amXDXDdulHmdz9t+I=)
2: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: 60wh4KYpgLwWQd8yEXdTLA6dUiz5IFt+DIItArAXQ1U=)
3: joe5pZwVwibh0SdF2PsA-ibLXSs.roa (hash: kolEql5tzzaraNXgVLIhDCRD/4roZFIN0wmtLXS0EH4=)
4: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:31:54:5d:1e:40:87:92:ac:20:a8:89:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=8568bac0f964999644d1d0dac1d2047dfe93e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:90:12:07:b6:86:dc:87:2d:da:20:1e:3e:
62:a4:fa:21:84:ee:f6:59:7c:cb:98:ff:b5:c5:7b:
6d:97:0a:7e:13:3e:ad:40:20:80:40:49:b4:b2:39:
59:5c:93:c1:29:a4:32:12:90:c4:36:77:03:2e:09:
c3:f4:74:98:60:0b:55:70:30:6f:e3:6b:46:49:90:
64:c6:53:55:ff:5e:f3:4c:c2:28:07:bf:00:38:5c:
84:22:9e:51:60:58:fa:54:c2:7b:92:fd:83:5f:c3:
59:13:7a:e5:96:ef:0e:08:b9:b2:63:dc:24:71:ff:
9b:73:0e:da:45:d7:b2:6e:7a:09:b2:48:8d:dc:ba:
bc:dc:68:b7:db:c3:bc:1f:24:ab:0e:44:33:a4:45:
54:00:64:31:0c:95:61:22:23:64:6c:ae:1c:e8:48:
41:43:55:17:2d:64:da:a4:6d:eb:30:ca:18:3e:b5:
fb:bb:cc:5a:e0:51:ce:e5:c1:b2:70:14:9d:c5:ce:
0e:d4:7f:26:86:5c:78:5e:38:09:36:97:33:09:ad:
d2:ef:c3:6d:d6:d7:79:86:bf:25:aa:70:21:9a:e0:
8b:1f:34:47:05:10:ea:2a:84:27:52:09:f0:23:6d:
87:e8:31:52:95:58:19:4e:cc:14:c7:55:ef:6d:e8:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:BA:C0:F9:64:99:96:44:D1:D0:DA:C1:D2:04:7D:FE:93:E9:C1
X509v3 Authority Key Identifier:
keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2f:46:b7:5c:92:d9:94:a3:55:62:85:6a:bc:04:d2:5c:51:
83:3e:6c:91:0d:7b:9a:c5:a1:9e:a3:fe:87:24:13:36:f0:37:
b3:e2:50:32:47:17:95:05:6d:eb:2b:1a:ee:fc:fa:77:06:1d:
87:4a:54:a0:f4:d6:5d:61:ff:bb:c8:a6:88:85:66:af:03:de:
6b:40:1e:e2:8a:18:a8:72:29:f6:74:8c:06:f4:d6:4a:0f:e3:
12:96:52:9b:be:de:e3:48:8c:7a:35:ba:fe:9a:50:60:ab:a7:
db:15:b1:94:6d:e6:00:05:4e:2e:88:8b:3f:46:3f:05:9b:ad:
b7:04:ea:54:6d:af:03:02:4f:4a:c8:9a:cd:dc:e9:bf:ad:4f:
2c:c0:14:7d:04:7e:05:ab:2e:df:14:2b:65:2e:9e:f3:ca:a5:
66:f1:ba:1d:64:de:e3:63:75:c2:26:9c:34:78:e5:29:cb:a9:
33:60:23:63:cb:25:3b:ce:7d:fa:6b:db:b2:ab:5e:e6:8b:a2:
3f:ac:6d:74:36:4e:77:6c:d2:f4:d5:d8:a9:4d:3b:99:f4:dd:
fb:75:28:61:5d:9b:00:cb:62:40:7c:e0:73:90:04:9e:6c:69:
70:f2:52:69:30:fc:4b:4c:09:c4:15:ec:ff:2f:6b:dc:bc:63:
72:cb:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:57 2025 by rpki-client