Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: GDWHJPmOqJT4VQdARh6GDzAjPtdXQF4JIUnkUM0YF4Y=
Subject key identifier: 7A:37:86:F6:F6:B0:09:95:A2:83:B8:BE:E5:42:15:A2:C1:E1:DC:F9
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 0194BC04F1E03B77EA2729BE1D8D6A1D14E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: GK7dPfXsLCPtdKMZloPOgO19p3km0MisI8FOS273hz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f1:e0:3b:77:ea:27:29:be:1d:8d:6a:1d:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=7a3786f6f6b00995a283b8bee54215a2c1e1dcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:7a:7d:4c:36:a9:64:47:74:78:ac:c6:b9:
78:c8:3a:1a:10:38:d0:84:1b:ac:5f:fc:9e:66:8c:
ac:46:8d:ef:e4:a6:37:fd:19:42:1a:5c:80:a4:79:
ec:95:1e:b0:22:bb:44:51:d3:27:cc:1a:14:e8:3a:
17:c8:c7:00:3a:9f:7e:4c:7f:cb:3d:7b:bd:72:09:
a2:ae:dc:58:43:68:8c:7e:e0:9e:e9:5b:b8:7e:fd:
56:15:05:46:d7:2f:87:03:0c:ee:70:57:c6:9d:74:
74:d7:f7:74:53:20:ae:b5:9d:ca:4d:b0:ab:41:af:
0e:5f:ab:b6:a7:17:52:15:7a:f7:72:ce:f7:25:55:
5c:82:cd:a6:c2:84:af:5c:73:22:8e:9e:5a:91:3f:
36:c4:8b:b3:47:cb:3b:f1:2b:4d:e5:b8:1a:af:bd:
3f:70:62:55:03:d3:4d:ee:44:b9:f7:60:6f:79:95:
9d:f9:d4:90:91:c1:8f:bc:cf:0f:7f:c1:b2:eb:c8:
c3:48:15:3a:b0:69:85:5e:64:97:e3:8e:62:d5:68:
36:0b:05:a1:21:73:33:66:17:05:7b:c6:0d:f1:20:
f4:50:63:1a:0c:28:f5:0f:eb:3c:d6:3a:52:68:34:
9d:b8:dd:1b:72:ca:ef:24:aa:59:8d:4b:e2:4b:f1:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:86:F6:F6:B0:09:95:A2:83:B8:BE:E5:42:15:A2:C1:E1:DC:F9
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e3:43:ff:fb:2c:8a:38:a0:0e:c8:ac:af:c2:69:79:85:a0:
cf:91:76:ec:f4:22:5f:07:39:13:5d:ed:20:2d:da:52:ab:cc:
0d:05:cf:1b:32:ce:f2:0e:b5:7c:6c:95:a2:bb:9c:cd:43:d3:
97:ff:94:0a:c3:53:21:07:58:ea:b1:f8:b6:be:bf:17:64:df:
7c:04:63:3c:29:01:b8:75:21:77:69:bd:bd:4b:c5:50:74:82:
b4:5a:30:1c:f7:ac:ea:8c:ab:0d:35:0e:b6:22:83:35:05:e8:
90:43:86:51:22:38:6d:fe:ba:34:40:68:bf:58:69:15:18:af:
b8:c9:09:ff:b5:01:76:37:a0:89:c2:98:1e:ca:4d:a4:1b:54:
2a:1a:2d:09:5e:d0:0b:68:89:34:92:cc:80:f7:6f:5e:59:24:
18:40:ab:c8:19:64:7e:77:58:9d:7f:27:7c:ab:40:45:51:87:
c4:80:6a:45:ab:61:ce:28:fb:5b:0a:8b:93:15:8f:92:f3:0a:
ec:a4:8a:d4:6d:fb:61:61:44:22:43:7c:31:8d:9e:b0:ad:8a:
73:9f:99:5b:d7:43:5a:dd:e3:2b:0b:e1:c0:71:00:9e:fe:1b:
cd:04:23:d2:c0:f1:13:c0:80:a6:05:b0:d1:d4:2e:7b:7b:45:
a0:5d:00:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPHgO3fqJym+HY1qHRTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj
MWVkYjgwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
Eyg3YTM3ODZmNmY2YjAwOTk1YTI4M2I4YmVlNTQyMTVhMmMxZTFkY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBd6fUw2qWRHdHisxrl4yDoaEDjQ
hBusX/yeZoysRo3v5KY3/RlCGlyApHnslR6wIrtEUdMnzBoU6DoXyMcAOp9+TH/L
PXu9cgmirtxYQ2iMfuCe6Vu4fv1WFQVG1y+HAwzucFfGnXR01/d0UyCutZ3KTbCr
Qa8OX6u2pxdSFXr3cs73JVVcgs2mwoSvXHMijp5akT82xIuzR8s78StN5bgar70/
cGJVA9NN7kS592BveZWd+dSQkcGPvM8Pf8Gy68jDSBU6sGmFXmSX445i1Wg2CwWh
IXMzZhcFe8YN8SD0UGMaDCj1D+s81jpSaDSduN0bcsrvJKpZjUviS/HjlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo3hvb2sAmVooO4vuVCFaLB4dz5MB8GA1UdIwQY
MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt
NDNjZTk0OTY2M2Q5LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5
LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeND//ss
ijigDsisr8JpeYWgz5F27PQiXwc5E13tIC3aUqvMDQXPGzLO8g61fGyVoruczUPT
l/+UCsNTIQdY6rH4tr6/F2TffARjPCkBuHUhd2m9vUvFUHSCtFowHPes6oyrDTUO
tiKDNQXokEOGUSI4bf66NEBov1hpFRivuMkJ/7UBdjegicKYHspNpBtUKhotCV7Q
C2iJNJLMgPdvXlkkGECryBlkfndYnX8nfKtARVGHxIBqRathzij7WwqLkxWPkvMK
7KSK1G37YWFEIkN8MY2esK2Kc5+ZW9dDWt3jKwvhwHEAnv4bzQQj0sDxE8CApgWw
0dQue3tFoF0A7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:00 2025 by rpki-client