Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: HiylI/FeS3Z0oFMfW9IHFVyDByhIeEVSWmP9scZbqNg=
Subject key identifier: 28:13:19:1E:48:D6:90:32:9A:1E:81:62:79:8B:32:52:99:4B:20:A5
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 0194BC3BCF3691F01D8EFD556EFE17CA7F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: GnDtGwM88ukWpI+mlQcGjRdbA6bncePk1j5Bg/6UtEk=)
2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:36:91:f0:1d:8e:fd:55:6e:fe:17:ca:7f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=2813191e48d690329a1e8162798b3252994b20a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:3c:e1:b5:92:a7:da:7c:06:53:6e:ed:a0:
69:06:40:66:d6:68:c4:81:71:e5:38:bc:87:8e:55:
4c:51:4c:61:7e:52:50:d2:a2:4f:9f:f8:31:d3:b6:
20:71:f5:3d:75:b8:48:02:93:5f:1c:56:ee:fe:3b:
0c:ab:5e:15:86:9b:58:09:b0:92:e7:77:eb:d6:0f:
2e:ce:e9:66:5c:5c:5d:11:33:16:64:35:f8:e4:51:
aa:a9:46:b1:7c:f1:8f:6a:9f:10:0e:b1:61:d3:c5:
13:51:9a:10:9f:6b:f8:0f:80:9b:a5:6b:b0:f6:50:
9c:06:92:28:61:61:10:4f:9c:d8:9c:4f:25:15:41:
1a:c4:b8:54:0f:fd:72:e0:6c:54:58:36:9a:e0:2e:
fd:9d:85:23:cd:fb:37:3f:2e:cd:50:93:ea:3c:56:
5f:2f:3d:10:c0:e0:f4:7f:53:ae:6a:45:41:09:ad:
6c:65:6d:ad:00:9f:70:72:c4:d9:7b:2d:3a:5a:bd:
05:9c:1e:17:bd:b5:9a:96:cb:36:ab:c0:1c:e8:a9:
f7:aa:85:ab:e8:ff:52:89:d2:f1:c6:d3:1d:c3:4e:
d1:1d:a5:1b:ef:6a:8b:e7:f7:66:cc:cf:58:31:74:
af:7f:0e:b2:3e:6b:40:d1:13:f1:20:db:c7:86:5e:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:19:1E:48:D6:90:32:9A:1E:81:62:79:8B:32:52:99:4B:20:A5
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:57:57:cb:eb:56:4a:fe:9f:c8:14:90:3b:8e:9d:f3:ab:aa:
8a:49:ae:5e:86:b4:70:c3:4e:95:2a:3b:01:c5:2f:4d:f8:91:
94:05:8b:e0:c4:9a:a5:3d:fa:f4:75:3e:a5:fa:51:14:63:15:
97:9b:21:64:af:35:b6:95:0b:d8:03:79:aa:f8:a6:4f:44:67:
ed:52:f0:6d:68:55:fe:84:63:84:d8:76:6c:df:7f:7e:00:66:
de:27:26:2b:69:72:5a:2c:2e:a3:a2:fd:3a:41:d5:b3:a6:8a:
70:67:2f:1b:20:a8:06:26:5b:26:25:a4:80:0f:ae:bb:28:4c:
0c:b3:4b:41:29:7a:4d:78:92:fe:4c:2e:5c:ad:22:e8:7f:07:
af:77:1f:7a:bf:9c:4f:d5:29:1f:d9:20:44:f4:c1:52:08:1c:
c8:79:0d:dc:ed:30:9c:0f:8a:bd:74:f8:36:e8:1e:b9:52:95:
70:c9:69:b4:ae:84:b9:18:2f:69:1c:b6:e4:e3:c2:fb:a1:8f:
36:73:22:8a:d4:c2:8a:b1:25:73:88:33:2f:86:17:f6:1d:35:
5c:27:47:c3:22:f7:80:f9:a6:6a:9b:db:39:5c:2c:85:bc:c9:
1c:66:29:59:85:4c:b7:1a:ee:ce:b1:dc:17:95:8e:71:7d:94:
ab:39:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:39 2025 by rpki-client