Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
File: dVebPdiwkr6Q2p90gOp2HpzSZIY.mft (raw, json)
Hash identifier: STZNKUzgzNMQhj74MiexND927V/BkD+ZdAgWy6vxb1A=
Subject key identifier: BB:DA:96:AB:12:B1:0E:37:D8:21:E7:A8:9E:D8:3D:48:15:FD:15:17
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Certificate issuer: /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial: 0194BC73294894A6456D60B6F2A8AC98C7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: _q_4z0J5i384UaXDQJYWs6HPoTM.roa (hash: b9Q87HIqk0+LBterNnXAl95RMpu5d8FMkhgmGh/3VlI=)
2: dVebPdiwkr6Q2p90gOp2HpzSZIY.crl (hash: bY9drstXBWHy/zJFyn/oqGAlH5bPz4SSCG61YPNNXBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:29:48:94:a6:45:6d:60:b6:f2:a8:ac:98:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=bbda96ab12b10e37d821e7a89ed83d4815fd1517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:d0:a7:bd:61:a2:67:bc:c7:ce:66:f0:b7:
f7:e2:1b:59:99:d8:48:fa:03:91:f4:e4:ca:65:cd:
b2:20:bc:77:93:51:b0:d6:be:31:e2:d0:20:d4:58:
c7:7c:e2:d2:4c:81:46:5a:ff:34:a1:bd:d5:3f:5c:
e1:21:32:d4:5a:a1:93:7d:0d:32:28:d2:d0:ff:54:
45:bc:8b:a7:42:af:6d:0b:c0:ca:b3:fb:93:3a:ee:
d8:ec:e9:a7:fa:d3:e5:b7:07:a0:6b:3a:de:e8:b7:
3d:32:d0:fd:c6:cf:19:ce:3b:28:c4:d5:26:c1:ba:
12:ee:79:98:24:c9:17:c4:b3:bb:5e:94:57:9c:be:
a1:e9:8c:fc:9c:7a:9f:17:f6:f0:ec:de:90:ad:b6:
b4:29:eb:26:b0:fc:20:09:6d:1c:51:12:1f:81:a2:
7f:16:cf:4a:76:4a:35:2e:4f:09:95:a4:3b:fb:45:
84:af:f7:f5:ac:5b:aa:71:17:37:e6:a4:29:c9:5e:
a4:67:3f:14:6a:93:ca:8f:c7:de:70:0d:61:7c:d3:
b6:9c:e4:bf:14:9f:a2:89:07:92:eb:b0:4a:4c:62:
3e:74:f8:77:15:28:ab:3f:f6:cd:e2:3e:89:20:39:
42:65:a8:8c:75:d4:0c:8f:e2:03:26:6a:4f:43:cc:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:96:AB:12:B1:0E:37:D8:21:E7:A8:9E:D8:3D:48:15:FD:15:17
X509v3 Authority Key Identifier:
keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:50:45:a4:f6:5a:03:94:bf:4f:94:ad:5a:c0:aa:7b:64:57:
7d:1e:36:ec:d4:e0:d8:59:3b:59:b2:34:9b:24:a2:6f:60:9a:
0f:6c:ce:22:6f:c8:d8:76:58:81:fd:2b:e3:fd:78:44:ea:2c:
d8:4f:23:01:86:c7:ff:a2:cf:be:ca:37:0a:8f:dc:06:3e:c7:
d7:6f:b2:dd:b3:d2:82:b0:42:63:74:70:bb:4f:2b:41:53:60:
21:ec:bd:87:60:05:1d:d4:9e:68:ff:51:9b:75:ff:4d:29:80:
94:1e:bd:e3:ec:46:83:8b:5d:09:97:a8:db:c2:23:79:fe:26:
e0:f9:b9:ec:cc:cb:ca:b0:db:84:02:c0:6c:df:93:f0:81:69:
cd:5f:6f:22:6d:08:9b:eb:dc:13:e8:7f:e5:d2:21:38:8d:04:
b7:d4:bb:69:08:29:9f:85:41:78:af:d4:50:c4:70:6d:7a:5a:
ea:6c:72:64:88:51:80:77:16:40:12:e1:55:ec:34:a0:6c:11:
d8:62:0a:ee:b6:33:e8:ab:70:bf:94:9d:35:76:ba:26:4b:f5:
08:93:4e:41:b3:d2:19:2a:52:1d:0f:dd:14:9e:5d:55:8c:fc:
2c:a8:1e:f6:da:a9:d0:bd:fa:23:1b:f1:3b:a5:05:f7:b9:9f:
a3:59:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:30 2025 by rpki-client