Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier: m2hT7mwAYpSijjtOAp0YbEyD5f+gs3+QkBNdBMfnuAo=
Subject key identifier: B1:98:28:9D:E7:34:4D:A3:48:C4:DA:2C:94:F3:A8:CD:0C:EC:45:5D
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 0194BD4E91902E975443EDB962347A72141B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number: 0F06
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=)
2: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=)
3: LS7cmX4hkxBo29n9xBMkazlGUQA.roa (hash: LcZigv6OQHpGmVW5BHzHMIZtI+TTJsjlraR4mOoxOrA=)
4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=)
5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: urikT+BbRbbroHY3Pv95m0ZwDTf1R+HVK6k5EJiuuvg=)
6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:91:90:2e:97:54:43:ed:b9:62:34:7a:72:14:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=b198289de7344da348c4da2c94f3a8cd0cec455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bc:1e:f2:1c:45:08:c7:38:99:da:73:13:8d:
f6:56:b0:53:67:1b:fb:1b:8a:94:2b:98:e1:e2:64:
b7:8b:22:bf:0c:05:ad:01:ff:da:25:2b:83:00:c3:
52:d9:b0:cb:c4:1a:95:6f:aa:df:a8:34:fd:59:50:
b2:24:7d:6e:c0:17:52:29:07:5d:ae:bf:f8:a4:87:
fb:52:09:c8:97:9f:ca:d2:c2:27:2b:79:2d:09:00:
41:cc:5d:4a:e7:dc:6f:60:1e:df:ab:3f:45:ad:66:
3d:2b:52:6e:7e:c8:af:25:fc:8d:67:a6:7a:6a:5a:
91:13:30:09:e3:b4:39:f4:5d:71:11:68:3a:65:f3:
e0:07:ae:c7:e9:85:4e:37:5d:f6:60:75:6a:64:95:
a7:36:10:e6:8e:c4:94:f4:f1:c5:fa:df:e3:c5:2d:
c9:5f:30:84:53:50:38:14:1b:cc:21:b6:a0:5f:e8:
1b:a1:7c:54:77:d1:6b:f7:d0:79:20:2f:47:a5:2d:
94:94:46:54:a1:2c:32:a7:ba:1f:25:26:71:04:ee:
f4:df:d6:ae:67:71:53:2c:9c:d1:f5:6a:98:d9:2e:
39:9b:d0:22:dd:e5:3b:a0:b7:39:16:40:32:8e:16:
30:46:5e:00:5d:a4:fb:0e:2f:83:56:42:a4:af:43:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:28:9D:E7:34:4D:A3:48:C4:DA:2C:94:F3:A8:CD:0C:EC:45:5D
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:04:07:fe:df:fb:d4:a8:87:eb:c4:43:cd:1a:70:d4:92:c0:
13:ec:97:51:e6:16:17:36:24:e6:73:d7:1f:7f:17:93:eb:4b:
e1:ce:bf:76:ef:34:ae:f5:71:98:62:6f:dc:e1:ad:60:cb:75:
e8:25:db:35:b6:a6:f6:6e:f6:9b:20:65:3f:38:25:1c:c7:f2:
4b:98:24:e6:d3:ef:aa:bd:5c:bb:f1:a9:9f:ff:b2:b8:d0:54:
79:72:d4:28:17:6d:52:29:0f:ef:fb:e5:5e:d6:29:e2:4b:39:
d0:42:64:ba:35:de:6a:12:85:27:a6:cc:b1:76:99:20:cd:a7:
12:22:de:d7:e2:6a:3f:b8:cf:46:09:e9:57:46:81:8f:27:25:
f9:13:ca:e4:96:35:8f:00:9a:55:0a:79:ac:b3:74:ad:7e:32:
64:5c:76:8c:a4:05:9d:be:d7:96:92:df:40:99:71:7d:98:05:
35:8c:b0:21:6f:48:7b:f1:29:97:99:a7:c3:4a:b7:c2:98:59:
0d:9f:88:bb:17:1e:cc:ee:03:9d:40:cc:99:56:aa:5f:6e:d2:
f3:d5:db:0a:19:62:d4:a1:d3:c7:ad:a1:0e:99:d0:34:f6:19:
25:50:f8:12:ae:d7:d2:ee:96:e2:21:d4:4d:5e:5c:c1:18:43:
11:bb:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:47:22 2025 by rpki-client