Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: MZgoWXKQjEVyjvaIIszE9MFU0pElP5zkHhCyXygPMBo=
Subject key identifier: CD:21:61:42:F7:00:FF:BA:5C:7D:5D:66:FB:B2:1B:D4:AF:E2:22:14
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 0194BD855FD458F77CA44813FC338A48609F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 088C
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: +UE+xCyalIfowtynREh4rtTZ958AkezEwLcXsLgx5+A=)
2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:d4:58:f7:7c:a4:48:13:fc:33:8a:48:60:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=cd216142f700ffba5c7d5d66fbb21bd4afe22214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:7b:91:d1:14:db:80:3a:24:8f:a6:94:67:
77:2c:ea:e0:00:df:79:5f:2c:c3:bf:75:71:21:68:
96:b7:82:6f:c5:41:b8:39:d6:84:7a:24:76:e0:8b:
2b:d3:b0:50:57:93:33:0c:7b:77:5d:65:39:3b:6a:
43:f9:25:11:b0:77:69:19:37:6f:b1:2c:dd:b9:23:
b5:ab:fa:7c:f8:38:a0:18:5d:36:49:70:96:22:18:
9d:cd:8c:5f:ae:7c:c9:4b:19:f3:25:96:56:8c:ff:
36:34:f6:6e:93:c6:ff:bb:75:40:9e:fc:4b:eb:09:
12:14:b6:e5:53:29:82:6a:07:5d:85:fe:ab:d2:64:
09:53:0b:ba:a4:ca:e5:40:bb:0f:dc:69:98:65:40:
10:0d:ee:39:b6:8f:49:d9:c6:2c:89:d3:ba:22:24:
60:ae:36:4b:f1:45:61:1f:f4:6d:fe:25:ad:bd:54:
c1:6f:77:0b:d8:4d:51:c2:c9:d8:f1:c9:81:51:94:
00:42:33:f5:41:b3:2e:87:a5:7e:96:96:ee:68:3a:
a0:06:9c:08:b2:36:94:da:3a:9e:95:4a:55:05:b2:
b8:55:11:3d:bc:dc:ae:82:55:e5:24:84:2c:78:56:
f6:10:25:be:97:07:3d:85:12:c1:3a:4e:8c:9d:00:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:21:61:42:F7:00:FF:BA:5C:7D:5D:66:FB:B2:1B:D4:AF:E2:22:14
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2a:36:48:99:a1:29:c0:09:9b:3d:99:b2:4e:b2:ae:7a:1d:
39:6d:85:a5:32:9e:fa:33:f1:16:e6:a1:8d:5f:a8:ee:13:75:
16:f3:3c:c4:02:7e:55:26:e2:f8:4f:92:4d:bb:98:28:04:e8:
4b:4a:4d:bd:35:17:50:45:9b:df:f5:b0:15:b2:bf:9e:c4:c2:
68:5d:74:e0:6e:f2:41:90:df:b0:11:18:62:22:a9:13:59:75:
f0:7a:a8:07:b8:bb:87:7d:55:e4:6c:8a:f5:f4:3d:87:a2:b7:
1b:5a:fa:27:df:74:3c:3b:8e:bc:62:d8:8e:d5:0e:19:a7:1a:
76:8a:f1:94:3f:a4:7e:ff:c4:b9:2f:0a:84:88:89:5f:6d:80:
06:fa:2a:7c:c6:d1:7c:ce:38:9f:ee:71:c5:b6:f2:34:af:85:
1a:06:8f:11:81:1b:5c:12:e0:89:5c:9c:b0:4f:58:4c:35:f0:
f9:1f:82:a4:a2:df:bb:2c:bc:8e:12:06:89:a5:3c:56:bf:a7:
eb:e7:fb:eb:9b:14:32:3f:5e:b6:6b:0e:b5:24:6b:a0:df:0d:
22:30:c8:38:22:70:16:56:cb:3d:7d:c2:e5:79:43:54:a4:64:
8f:42:c6:26:2e:11:8a:7e:4f:3a:e2:c7:a1:da:99:c0:f7:3e:
a9:3b:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:18 2025 by rpki-client