Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
File: d0HROhWph91gAZwCZdLs7EhAlEo.mft (raw, json)
Hash identifier: 83FpdviiSm9otLNvggJ5HUFGTFDY2uFCrgH3z3nj07E=
Subject key identifier: 96:6D:84:78:B3:AB:88:6B:79:83:84:46:22:E3:1F:4A:CF:10:98:C5
Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a
Certificate serial: 0194BC72E372838337DE6810BD2E9ABF806E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
Manifest number: 053D
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: EKdJIayRjGqpNjC_sXcLD4LpFxg.roa (hash: Q7XyDf/+ZYlwIoQHzzpWgBVzZ1z6oDECbrHcCzM9GG4=)
2: _-z4nvaTTyccKXJFwod66iKewX0.roa (hash: B/6vrb0o2kiLAGPMrkOgglOkupcsHoxdqdIe49F5XFQ=)
3: d0HROhWph91gAZwCZdLs7EhAlEo.crl (hash: XRTxePOLq7tp/Bm/1NUVmtU//LM+lzqqS/Uif7H+Zj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:72:83:83:37:de:68:10:bd:2e:9a:bf:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=966d8478b3ab886b7983844622e31f4acf1098c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:16:8d:5d:19:ea:2c:fb:e6:ee:a7:41:56:
64:76:1e:7a:0e:13:4a:94:3d:26:4b:9b:35:b7:46:
f8:3f:b6:0e:23:39:f6:78:ed:05:80:2d:24:ea:4e:
ee:c0:02:13:80:e0:fa:1b:53:b0:86:bd:d6:79:5a:
ec:0e:26:f9:47:7a:cb:1c:23:f8:09:9d:a5:d3:08:
65:02:0c:2d:00:c7:95:77:61:5d:23:0b:34:be:9b:
da:2b:fa:73:02:88:d7:85:5c:26:65:b7:72:dd:06:
b6:f3:46:fe:b5:a8:0a:c5:db:4a:1c:92:28:f9:87:
63:1f:e4:05:7d:20:b7:76:50:46:2a:5c:4b:69:b9:
e7:98:ca:8e:2b:9b:c9:27:eb:46:09:a5:ec:3e:bc:
df:b2:f6:c3:28:4d:87:cf:cd:2d:e4:65:6f:f6:79:
20:be:c6:d3:94:ba:8a:77:9a:78:dd:3e:20:d5:a5:
f9:c5:cd:7f:c9:db:91:74:c2:1c:f9:19:eb:00:d8:
73:71:4a:d5:73:1d:f3:69:b3:6b:2e:cd:37:41:22:
47:e6:93:e8:03:be:de:bb:55:c7:bc:91:d5:40:0c:
13:94:70:7c:11:f5:6e:72:4f:76:d0:cc:6c:28:75:
48:2f:d0:e2:5c:cd:67:5c:b5:ad:39:3d:eb:fc:ff:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6D:84:78:B3:AB:88:6B:79:83:84:46:22:E3:1F:4A:CF:10:98:C5
X509v3 Authority Key Identifier:
keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:82:37:7f:a2:40:13:f8:e7:dd:0b:5d:08:7d:e1:e8:d8:76:
7d:ee:73:19:11:af:c7:d0:8c:9e:d0:1b:59:db:40:51:af:02:
5e:8a:6d:58:80:b3:03:96:ac:cc:4c:1c:e0:10:4d:6a:f6:c8:
23:df:5e:a6:95:14:f7:05:21:4a:dd:a9:dd:82:b4:bd:63:e3:
42:16:b3:42:4c:ec:3c:e0:50:18:a6:59:ce:d3:d3:0d:d2:22:
bf:0a:d6:58:68:dc:a3:78:29:93:02:2e:74:c1:dd:61:7c:3d:
31:0e:d6:81:91:2b:60:25:79:c5:ad:68:7f:8c:81:c5:ac:60:
00:11:3b:07:46:09:d0:1a:a1:61:bd:a5:ca:1c:a4:f0:3f:12:
8d:e8:67:88:22:93:50:b5:26:9c:4d:58:6c:49:8b:4c:b0:e6:
40:6b:53:97:ad:90:61:98:66:dd:4d:c9:e5:83:87:2d:0a:9c:
10:54:30:83:85:26:9f:0f:70:69:6e:18:b3:ef:ca:23:15:41:
22:0a:7b:56:7e:31:be:8c:2c:85:de:3c:05:fc:53:03:b9:b5:
3f:0c:0d:d6:5c:d7:47:82:f0:7f:3d:bb:b5:00:b7:82:40:92:
5e:52:3f:f6:7c:31:42:bc:1b:6a:71:1a:f2:fb:aa:ef:e5:8a:
5c:7f:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:22 2025 by rpki-client