Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: XvKa98uEzq62fmxeix+l10MwUNoFuB7l07prGUsDp+s=
Subject key identifier: 13:D3:89:2A:3F:71:58:65:30:D8:E2:79:BC:62:0F:1B:B9:01:2D:6A
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 0194BD8582336C48391C676780A4B3D8508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: hpCZhQcG0VySVL2gPFjFjw00oNtUVWSH14r/Vcmzszw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:82:33:6c:48:39:1c:67:67:80:a4:b3:d8:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=13d3892a3f71586530d8e279bc620f1bb9012d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:2d:bd:c8:18:50:88:fb:4f:0e:fb:e1:4c:
aa:49:5e:e9:8b:29:80:ec:0d:df:3b:6b:d5:ca:f0:
37:3f:0a:af:f5:f6:93:84:45:4e:26:9c:1e:62:fb:
20:bd:04:c4:26:e1:f4:97:a2:f5:f5:28:e9:0d:b8:
1d:f8:4b:a5:12:b9:97:cd:bc:d7:51:4a:b9:f6:aa:
54:13:d0:cc:11:31:4b:b4:83:46:db:42:79:a0:1f:
d2:f5:ce:bb:b0:1c:06:b9:b1:48:d2:31:95:7c:db:
df:c4:3b:0f:ef:c4:d2:34:60:82:32:48:ba:80:41:
c2:59:ea:2f:e3:52:b9:8c:7b:1d:9e:f9:f3:84:4f:
96:eb:8a:8f:1c:ff:2e:f6:12:92:b5:f7:4f:7b:3c:
8f:04:88:47:bb:40:eb:d8:88:e4:0b:86:93:6c:55:
e4:1a:34:2a:98:33:42:5a:cb:ed:3e:d5:24:a0:4c:
4f:3d:0d:d2:d2:2c:0a:73:e3:6f:2f:1f:fd:34:91:
de:e9:a9:55:55:cd:91:e0:0a:9a:ce:69:79:11:0d:
a6:99:0d:a5:e7:fb:2d:bb:7b:f8:48:44:0a:ee:5d:
3e:b2:f0:9a:3d:f8:8e:7f:3f:04:e1:36:c9:64:1e:
7a:f5:8e:76:28:74:33:48:57:88:a9:0c:9f:5f:11:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D3:89:2A:3F:71:58:65:30:D8:E2:79:BC:62:0F:1B:B9:01:2D:6A
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:f7:71:ca:1b:a6:88:18:c2:fe:b9:87:3e:74:c7:ea:b6:
76:f1:76:93:f4:c2:27:0a:db:4e:e6:0f:67:49:c3:78:6f:c0:
68:21:e9:17:b0:3e:52:7e:c1:6c:bb:30:d4:11:3e:37:aa:ab:
92:52:6f:b0:ae:81:d1:57:cb:b1:78:09:3d:02:2c:e9:85:a7:
f4:25:e3:f2:65:3c:b0:48:a3:e5:73:f7:54:74:9c:be:f3:e6:
b3:3a:45:22:72:84:6c:3d:30:a1:8e:8a:9d:af:13:7a:a5:e4:
81:86:08:e2:bd:66:3a:4a:c4:48:8c:ea:44:56:e2:8f:ba:9c:
bd:2c:ab:f8:79:ad:ff:68:ad:64:d4:53:02:71:b5:a8:5a:6f:
ba:67:85:58:5c:c1:6f:c9:4e:0a:2a:f2:c6:05:db:8e:87:14:
6f:ec:2b:2c:19:f0:ad:66:7c:f9:7f:27:73:a7:5f:d5:c1:5d:
ea:00:62:9b:a1:e7:87:2a:4a:07:db:1d:7b:c2:20:5c:e5:e4:
26:30:d8:d9:2b:44:7b:19:51:59:e4:ca:09:52:8a:69:cc:2a:
26:3e:ff:e1:16:48:8f:c8:50:e9:c6:fd:a7:92:08:1b:7f:d8:
bb:03:a2:5b:8f:c9:9b:cb:50:da:61:67:73:04:ed:a6:57:a7:
ad:7e:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:55 2025 by rpki-client