Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft (raw, json)
Hash identifier: ZGo18cG6F6yS7Dmt62IHUeWapbp7s1RFKwXEGgiqjCc=
Subject key identifier: B1:13:4A:CE:EE:CF:FF:DE:C2:C1:43:7E:B7:2E:93:08:FA:A7:58:3B
Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Certificate serial: 0194BD859EFEC30A2481D1471C13AA4154B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
Manifest number: 0C91
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl (hash: jYLYTmUDvGtWgLmYU+092bmYh8IUblR6AB+p1UjhzaU=)
2: FIHDrOZdPItJ1g7-VrAk_uoQnSo.roa (hash: 1BVoM3pIwN+Dth/AavDroFy4/aBiv0LMqKNh/mLZqqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:fe:c3:0a:24:81:d1:47:1c:13:aa:41:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=b1134aceeecfffdec2c1437eb72e9308faa7583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:b6:cb:47:f3:57:47:8a:85:bf:a8:67:7d:
18:2a:bc:14:98:90:09:f7:f1:99:05:bf:83:dc:d7:
00:ed:55:80:f1:a6:56:8c:0e:33:c0:97:9e:79:77:
a7:d5:a7:7a:10:9e:84:ef:f6:1d:b9:e4:f1:be:aa:
4e:4b:60:58:ee:12:22:65:a0:49:ec:61:7e:76:ad:
49:0c:90:77:de:5a:c4:48:ac:a9:6e:46:38:00:93:
f8:a1:9e:a4:2a:3a:b8:54:45:1a:5e:73:b8:1c:8a:
ee:59:fa:ce:ff:ec:c8:61:e9:e8:ae:60:ac:cb:72:
7d:9c:46:cb:15:ed:e9:f4:ff:2c:58:05:10:06:43:
36:5f:a3:4a:1b:d8:3d:0b:a6:23:91:d3:8f:4b:e1:
55:1c:19:3c:e7:3b:29:db:3e:96:da:89:a0:b5:c9:
e7:00:f5:85:7d:de:e7:c6:9c:e6:d0:2b:fb:56:0a:
2c:28:14:37:03:be:90:4f:a3:1c:df:d2:88:83:74:
86:26:62:d9:25:84:43:94:58:ee:61:75:81:b2:b1:
93:65:3c:19:01:fe:d4:6b:d7:d9:70:ee:80:da:c4:
fd:f5:1b:a8:29:dd:0e:f2:77:95:74:50:b6:bb:8c:
5e:f6:84:e5:87:68:44:98:f2:3c:3c:17:c8:16:58:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:13:4A:CE:EE:CF:FF:DE:C2:C1:43:7E:B7:2E:93:08:FA:A7:58:3B
X509v3 Authority Key Identifier:
keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:e2:4b:16:eb:5f:11:6b:63:07:41:8a:e5:0a:e2:85:28:
37:25:17:38:8b:88:ca:63:21:f8:6b:17:56:17:91:fc:a9:ac:
0d:cf:9f:1b:3c:6e:4f:d2:cd:17:0e:82:63:83:b2:2a:7d:a3:
8c:ef:34:91:4c:a5:cc:2d:75:8f:5e:1c:10:a8:3e:90:c1:5f:
50:1f:0d:4d:b1:3b:67:f2:d3:18:0b:bc:75:14:7e:04:48:58:
5c:ab:bb:9c:95:af:ba:ae:c6:d1:57:a1:c0:c4:83:5f:bd:7b:
ce:2e:a3:92:71:4b:78:3c:f7:0d:24:df:38:99:6c:27:31:9d:
69:8f:1f:97:0a:06:6a:de:f9:e6:b3:37:a3:de:3a:ed:9b:67:
4d:40:6c:7c:47:94:2d:df:b0:d7:21:c8:0d:80:6d:04:46:04:
05:12:74:e9:2a:f2:c7:21:5c:32:86:9f:73:94:ee:e1:93:e6:
4c:2e:2d:f8:21:40:91:d1:ad:08:8c:67:2f:12:53:2f:a6:46:
89:4e:88:af:bf:bf:b6:80:80:1a:49:7a:65:60:a2:1d:bc:80:
08:a8:fd:ed:d6:ae:b2:02:4f:0f:79:7c:de:4e:45:c3:68:49:
23:75:ef:e0:78:fe:4d:68:01:04:4f:a3:81:fc:f0:01:db:e7:
3e:79:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:55 2025 by rpki-client