Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
File: hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json)
Hash identifier: ajPixWc/fxGq/+bd7JGH95q+Qi6Qsx90YIXMhKEFiRM=
Subject key identifier: DA:BC:FB:CC:EB:DC:B3:27:DE:37:2E:28:FE:EB:7D:D3:68:DA:C4:57
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial: 0194BBCE23564F3FC19ED5AFE79858394147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
Manifest number: 0DF3
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: +9dlw92LULiwqc/uMXo2jyG3rrR9I8gsrT3vAiKNtFM=)
2: uVc-YEHIfoCC97dYSAB-pvf1GkY.roa (hash: xpxJQ9Mtn3be8wfSELsmv9qWpA192efhc4xx/FDBoxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:56:4f:3f:c1:9e:d5:af:e7:98:58:39:41:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=dabcfbccebdcb327de372e28feeb7dd368dac457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:70:9b:65:9a:24:45:87:b7:39:c7:46:0a:
2d:76:08:ef:e1:30:89:6f:f4:3f:de:37:c8:d4:cc:
68:96:e4:8f:ad:a3:a3:71:ce:05:64:d5:1c:76:27:
91:41:f4:98:c4:03:ea:74:37:ea:2b:49:fd:15:f9:
ee:e0:35:06:10:2b:04:ef:44:e9:fe:66:b5:9f:ad:
22:38:9b:33:71:1b:52:45:7c:87:42:14:fd:6d:d9:
13:b6:74:99:05:85:89:e6:e6:11:43:75:a5:08:cf:
37:dc:52:e5:40:fa:a9:54:69:6d:0f:e4:a4:cc:6d:
13:1e:94:78:bf:b1:5d:f3:27:be:0f:65:e8:66:2c:
7f:79:de:85:ef:55:8e:7c:2f:1f:77:b1:f5:00:09:
2b:50:ce:0c:8d:86:3c:60:47:00:05:71:66:74:f3:
a7:f9:cd:59:3e:49:79:bc:43:27:c9:86:e1:e5:08:
c9:78:7e:ab:92:0e:38:fc:ca:a4:9a:18:75:0f:de:
ed:8d:56:0f:76:13:b0:54:c7:9e:48:89:af:6d:d1:
99:44:c8:4c:d7:20:ac:c8:14:e9:29:93:c5:9c:a5:
70:d3:9a:ba:17:aa:0c:9e:1a:3e:25:5e:19:a2:c4:
a8:78:d9:0f:88:a7:fe:3a:47:83:d4:de:3a:60:6d:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:FB:CC:EB:DC:B3:27:DE:37:2E:28:FE:EB:7D:D3:68:DA:C4:57
X509v3 Authority Key Identifier:
keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:11:11:07:66:e3:f7:21:ba:11:06:5b:71:8a:6d:f4:54:fb:
c0:e9:ea:c1:26:12:5d:ec:1e:04:6d:99:67:dc:91:3f:bc:06:
df:1d:01:2c:19:5e:4e:ff:99:5e:cd:46:16:12:15:3f:bd:e1:
1b:b0:d8:a7:91:62:eb:fc:bb:aa:ed:b4:3f:4d:19:0b:0f:4b:
af:83:5a:48:c2:4e:91:84:a9:a0:73:16:dd:ec:23:0e:29:b6:
7f:c2:01:2e:79:a1:87:cc:5a:1e:9a:9f:01:18:9f:cf:62:c1:
c8:97:0f:2a:79:bf:5b:38:2a:22:59:73:fd:d0:9f:cb:9a:66:
9b:4d:47:94:85:2e:16:4f:8e:e2:76:21:f8:ca:b1:77:ef:db:
75:fa:39:a1:b9:bb:fd:98:2c:c0:8b:a8:b6:17:b6:50:4b:fc:
f9:74:c5:a8:52:a8:57:5e:70:87:60:9c:d5:d4:18:67:29:1a:
8a:21:63:31:04:35:9d:6a:4f:ac:27:d3:9a:6c:d4:45:4f:0a:
42:b9:e7:b4:f7:0e:9b:a8:a1:27:ce:6d:3d:31:ae:03:40:92:
e2:93:57:1f:0a:8b:c9:28:a7:17:e8:53:53:6f:ca:03:7b:89:
59:75:86:22:57:6b:5e:07:89:a7:48:4e:e2:f6:fd:ae:83:2c:
ff:d7:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client