Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: 7DIeSJN0goknIBJlhjvP5gyUPZrmrO7uK/IGpiqzIdY=
Subject key identifier: 72:F2:1D:11:07:A4:B0:EA:D3:AB:2D:FC:01:C1:12:84:E8:20:EC:8F
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 0194BC0523AB172A00393AEC0082C6356944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0414
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: VHpu2ia6H6VUbKCzeYNYf1dmBNRLNkZokfnguJmqvDA=)
2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:ab:17:2a:00:39:3a:ec:00:82:c6:35:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=72f21d1107a4b0ead3ab2dfc01c11284e820ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:40:52:48:e7:06:9b:d6:0d:50:e6:c0:37:
ef:e4:2a:14:ca:57:ab:38:52:38:14:4b:2d:44:76:
1d:e4:87:a9:e3:8a:b3:fe:a0:38:24:79:3b:f0:db:
72:6b:6a:56:d2:57:3e:9f:e7:84:fe:18:6d:ce:66:
5b:bc:01:44:a4:a0:cc:f6:37:d3:41:1a:28:a5:d3:
66:e1:f8:7d:2d:5d:3b:df:bf:87:c8:1a:21:14:42:
ba:51:02:98:be:93:21:24:66:78:5b:8a:cc:d6:9a:
19:b6:58:73:0d:83:6d:db:b7:cf:e5:f1:ab:ba:29:
75:17:d2:1b:7e:40:5c:76:56:ce:2f:55:c8:74:d4:
59:9f:28:c3:66:64:a5:18:d1:bc:54:9a:8f:cc:02:
72:69:19:bf:43:17:0a:85:56:98:90:fa:9f:3a:8b:
cf:08:8a:4c:a6:86:d2:1d:eb:bf:28:c4:62:64:1a:
5e:95:52:c7:d0:c1:ba:31:1b:e5:5f:b0:b9:76:55:
1a:fa:5c:10:d1:87:c8:73:6f:55:55:ae:c9:5b:2f:
68:8b:fc:f2:69:1f:57:03:6f:2f:a3:f0:3a:4b:1e:
49:c7:37:40:99:2e:49:04:74:fa:f3:ca:2b:a4:6d:
0d:9a:59:ee:00:e6:bd:30:02:a7:b3:28:06:0a:8c:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:1D:11:07:A4:B0:EA:D3:AB:2D:FC:01:C1:12:84:E8:20:EC:8F
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ad:19:1c:eb:2a:d7:a8:ea:06:4c:46:bc:8f:5e:5a:a8:82:
ef:65:43:eb:2b:cf:8c:fc:eb:38:aa:90:b8:90:14:16:86:e8:
67:15:72:12:da:6a:da:57:df:30:42:05:2b:f0:4d:41:1b:7f:
63:68:31:61:08:42:82:1f:5b:7a:21:bb:ee:b2:a3:be:8c:07:
2c:0b:3f:6f:cb:49:31:2f:1c:e9:e7:23:54:42:17:76:75:a4:
c1:fd:c1:13:e4:ec:bd:4d:11:c0:45:47:c4:35:7e:e3:f9:3b:
c3:c8:79:40:b5:76:72:33:a8:61:bb:c1:90:e0:2b:21:b1:64:
df:dc:ba:57:64:a8:60:a6:c5:c2:a3:ac:ef:bc:17:fe:3d:3f:
13:0c:e4:1f:22:95:42:11:97:9b:e3:71:79:37:e4:b9:70:a6:
97:1c:3b:5c:6c:5a:94:11:19:da:b5:dc:11:9b:34:54:9b:e3:
a0:42:6c:10:c2:fe:ea:9f:cb:09:82:5e:e9:57:c2:d5:86:8c:
40:e0:4a:49:4a:63:cd:78:6d:b0:d4:df:45:f2:17:53:75:67:
bb:66:fe:f6:ef:7e:7f:19:23:b0:81:4a:c6:48:b3:5d:17:ce:
ad:ee:a7:3e:fa:d6:dd:99:16:b8:cb:42:23:ad:4e:66:b0:66:
d5:ea:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:28 2025 by rpki-client