Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: fZb6+tVizmDmEEPxAiQIz3ZabzuyDOgYAKFObxqfyGY=
Subject key identifier: 35:2B:D4:AA:F9:E8:FE:EB:6E:0F:3F:53:E1:04:FE:10:9E:8A:62:DB
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 0194BCE07A3F8A58F145AD57E5562CD8DD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 1337
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: dSRv/1f5ZMkskKieHc/dfjv18AmjDmqrjqPLcuuIqfU=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7a:3f:8a:58:f1:45:ad:57:e5:56:2c:d8:dd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=352bd4aaf9e8feeb6e0f3f53e104fe109e8a62db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:63:5c:51:87:86:b9:aa:7c:1b:23:bf:5c:
63:50:78:77:7c:28:6e:cc:77:0b:80:49:59:21:5e:
bc:96:dd:5a:76:c0:ab:dd:0e:00:a5:81:35:e1:68:
fb:f9:d5:6e:52:64:37:87:5f:b4:6f:63:09:aa:14:
55:fe:a7:d7:b0:b6:23:b9:40:c6:cb:fc:00:2e:f6:
f8:cf:e4:2e:82:6a:8c:67:e8:76:95:2e:26:52:ed:
3b:26:8c:82:e2:df:79:fe:cc:66:67:90:35:d8:f0:
aa:96:1b:97:d5:9b:77:b8:9b:fb:e7:f7:dd:79:fa:
82:be:94:4b:39:9d:7e:d9:9c:73:ed:98:84:61:0b:
d8:d3:f6:41:81:cf:fa:24:11:9b:21:53:4f:6d:51:
60:79:fb:5c:5d:cf:5c:e8:ac:74:be:85:4f:ec:e1:
45:33:8d:08:8b:cd:dd:8d:4b:d3:9e:33:6e:d1:8f:
b0:60:76:29:b4:e8:75:b3:13:d2:4a:63:7f:55:e0:
f3:fc:3d:05:81:44:88:a9:d6:34:ee:15:7b:fa:70:
40:6c:4a:3d:d5:b7:64:29:d3:b4:65:3b:b0:c9:0e:
c0:f7:23:64:88:e4:ba:1b:8e:ea:3f:ca:d5:98:99:
94:19:bb:e3:ad:6c:ca:bb:05:44:44:ab:8d:90:d8:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:D4:AA:F9:E8:FE:EB:6E:0F:3F:53:E1:04:FE:10:9E:8A:62:DB
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:5a:66:04:1e:3f:1f:a7:a0:9b:15:9b:de:b1:8e:3c:ac:29:
92:6f:09:80:90:7f:7b:2e:17:a1:27:2c:6a:22:1c:7b:6f:c6:
c1:50:f3:ab:74:de:0f:ad:1a:ef:1a:ef:9c:4d:a3:fc:a6:61:
07:81:59:a3:dd:07:2a:b0:fc:ab:95:ed:00:44:8f:b1:a2:a5:
56:f2:c5:ef:13:bb:70:81:eb:cc:56:29:4c:34:fa:b6:75:eb:
a4:e0:ce:fa:60:cd:18:1f:d5:74:57:9a:ed:d3:96:61:aa:ed:
91:ab:28:91:20:e2:3b:1b:4b:fd:3e:80:2d:a4:83:7c:f6:4e:
81:28:d3:ab:7a:e2:30:56:77:f4:0d:6b:59:52:ac:78:07:f5:
61:75:73:cf:07:d7:1d:2e:39:1e:00:a8:e6:8c:0c:59:c6:75:
4c:22:ef:74:aa:ef:3e:60:65:a1:c5:3c:5d:b3:cc:58:fd:1b:
bf:c8:ff:e2:df:14:49:da:02:7d:3d:27:d9:c3:64:f4:76:27:
d2:ec:df:90:e0:35:27:ec:b1:8a:eb:dd:d6:4e:1f:da:41:f9:
0b:93:a8:ac:49:85:0c:79:4c:cb:01:a7:ff:fe:81:bc:f6:f1:
39:5f:97:24:85:70:ab:66:9b:a7:f6:c4:dc:c7:08:37:cf:67:
02:fd:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:14 2025 by rpki-client