Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: GeLeA17uTwVnsOJ4Y7bPaYHo5+UpMwUBND6r2qdoilM=
Subject key identifier: 01:03:75:9E:D6:E8:AD:BB:F7:6D:BA:92:E8:33:AA:51:A3:66:08:44
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 0194BD4E8BF01B2B4A85A6096362D5F493E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 0FAE
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: l+d749bjYDSOiUVkOIqDHDBaqUhYRKuy7byliFVRS3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:f0:1b:2b:4a:85:a6:09:63:62:d5:f4:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=0103759ed6e8adbbf76dba92e833aa51a3660844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:c5:f3:76:fa:af:cb:2e:e7:a6:3d:18:99:
a8:6d:14:36:62:9e:a7:64:40:27:d1:fe:6a:82:b2:
a9:01:eb:ab:0e:14:cb:bc:0e:c5:65:3d:b8:bb:ec:
ba:4a:40:92:20:8f:28:18:59:65:b4:f3:fb:39:a4:
e9:8e:9b:5e:78:e2:53:11:bf:ca:82:9f:2a:0d:b0:
ef:ed:84:fc:66:74:77:52:5c:a8:12:e7:e0:b5:bb:
be:aa:25:2d:a3:79:c6:cb:8b:34:55:1c:64:bb:dd:
3a:60:15:a3:1d:97:c6:63:ab:e3:1e:ed:a5:83:46:
95:46:b0:2b:95:74:99:a1:64:a2:fa:bf:0e:4f:8f:
27:7d:24:a0:b8:6a:98:a5:77:01:65:89:ee:dd:91:
27:99:1e:3c:6b:82:81:09:f8:8d:b4:0f:70:a9:72:
8e:f7:37:13:ad:83:8a:c1:6b:d8:52:da:cb:4b:7c:
6f:69:e3:d5:10:22:9a:71:2d:f0:91:9a:9a:b9:dd:
50:77:27:79:df:dd:13:c3:a6:8d:f5:aa:f0:6a:08:
00:56:b4:37:fa:27:0e:c9:1f:e1:16:69:4f:34:e0:
a4:40:63:35:c1:50:92:c8:d2:70:b2:85:03:0f:57:
4f:50:09:95:eb:bf:ac:3c:f4:d5:1b:20:a4:3c:9c:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:75:9E:D6:E8:AD:BB:F7:6D:BA:92:E8:33:AA:51:A3:66:08:44
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:00:ed:2b:7b:89:d7:d7:63:95:8b:b4:94:86:70:da:6e:
7e:bc:85:bd:ed:b8:d8:24:80:aa:8e:26:3f:7f:d5:17:9a:20:
cb:5c:3c:92:c3:f1:93:78:4a:ce:02:cc:48:35:38:96:4c:9b:
50:83:23:47:70:72:b4:8f:19:b9:87:24:87:dd:8e:b6:2b:57:
13:1e:23:1e:15:ac:0c:32:c8:b3:8d:b4:89:35:27:ce:d3:64:
90:08:29:15:7a:5e:16:02:30:0d:39:83:d0:b2:29:2d:6b:6f:
e5:79:dd:25:24:d9:81:54:af:71:db:6e:26:5b:d5:a3:dd:31:
b6:15:87:65:80:8a:48:b1:de:85:2f:c6:70:b1:c3:fa:8a:8d:
e4:77:24:05:08:df:bd:fc:4a:bc:98:c3:52:ea:ac:41:c4:21:
ca:78:63:30:8b:ba:6d:3f:87:85:70:21:91:46:61:a0:a3:70:
f8:81:14:49:49:97:2a:15:30:68:b8:5a:be:96:43:9a:1f:32:
2a:a2:1c:0a:c3:18:52:ed:4f:40:fa:9c:c5:82:e0:8b:9e:73:
b5:6e:40:7e:82:ca:b3:7e:8a:d7:14:5f:b9:32:cd:b2:1b:81:
18:6d:01:f5:d4:b0:31:5c:63:85:b9:63:50:d5:de:56:c0:08:
d5:c9:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:18 2025 by rpki-client