Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
File: DoNbiW2nHS2q3_E51ltymPhBJBc.mft (raw, json)
Hash identifier: StbsKFdrrAtiziQeOv50elQ5MUYNukroivqv4piyiAQ=
Subject key identifier: CF:BA:02:11:D5:B7:90:8D:AF:07:E3:A6:3B:1E:2A:94:8E:DD:19:38
Authority key identifier: 0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
Certificate issuer: /CN=0e835b896da71d2daadff139d65b7298f8412417
Certificate serial: 0194BCA994472E992F43050E209E2E168CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: DoNbiW2nHS2q3_E51ltymPhBJBc.crl (hash: D0YMSEHg4H33ZcOFf6VaB9rxw+i84J4nT2NWqEnC6po=)
2: jBckqPQFaXVG0d-H_hcaAGH7CKM.roa (hash: +uEvgPae+lRjbvXvv3CmkwknC6+ftUjZQH4oSS8SHfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:94:47:2e:99:2f:43:05:0e:20:9e:2e:16:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e835b896da71d2daadff139d65b7298f8412417
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=cfba0211d5b7908daf07e3a63b1e2a948edd1938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:b9:ff:d2:fd:5d:6f:99:26:b2:3e:bc:c3:
d3:f2:2e:c9:94:65:f4:d0:2b:fb:56:45:ab:e2:09:
45:d6:52:65:44:85:b7:ea:35:30:ef:81:99:54:26:
c8:17:c5:c5:2c:51:3b:b7:dc:bc:dd:60:b2:d7:49:
d5:2f:de:00:57:39:22:60:46:13:63:28:b5:94:f5:
a4:b5:56:a7:9a:b1:0c:a2:92:40:42:e2:b6:32:ad:
ea:e0:94:ba:2d:ae:29:39:2d:2a:8e:68:58:00:5a:
d4:b4:0f:fd:33:15:25:2d:9d:a8:f2:e7:9f:2e:af:
ea:b4:ed:ec:ce:4d:3e:84:fd:c1:23:51:17:be:57:
f5:eb:6b:1b:f3:0d:14:65:46:b7:4d:0b:98:58:8c:
f2:29:d7:18:74:56:96:23:05:f4:cb:75:0b:dc:67:
ba:d6:b5:66:c8:3e:38:24:60:65:30:69:3b:91:c7:
3f:35:64:6e:4b:a1:72:da:6a:82:14:35:39:8f:ba:
99:25:fa:c9:67:c7:a9:a5:c3:af:5d:9f:b1:63:fb:
01:be:60:23:bb:d5:c2:87:56:37:f2:56:3d:5b:00:
a8:e0:f8:13:65:09:77:d0:c6:16:98:af:3e:60:fa:
77:a6:9c:a7:91:f5:3b:20:42:50:d6:2d:fc:48:70:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:02:11:D5:B7:90:8D:AF:07:E3:A6:3B:1E:2A:94:8E:DD:19:38
X509v3 Authority Key Identifier:
keyid:0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:84:d1:26:c2:dc:04:07:de:3e:5d:f7:bf:4a:03:39:0a:
61:c3:72:8e:99:50:b4:0b:05:81:ca:e0:cc:47:8d:36:e9:ad:
1c:1a:15:1b:7d:1d:5c:72:56:15:c3:d3:be:70:65:9e:5d:0f:
fd:79:46:c4:28:2d:dc:e0:e2:43:64:b6:6c:7d:9d:7e:a8:c3:
9e:8f:b0:0d:01:f7:73:7b:8a:1d:1a:b9:68:60:b4:26:07:ad:
ac:04:15:e1:e1:11:76:e8:10:5a:23:7d:c6:4b:98:44:60:8d:
ec:5f:8d:2f:ee:38:02:92:85:3d:7b:66:2d:69:d0:f3:cd:e6:
8d:55:54:71:4c:db:4c:ae:d3:86:91:ff:62:30:44:ba:de:d0:
01:3c:49:b3:5a:0a:e2:20:34:c1:53:f9:64:00:40:bf:7d:7e:
36:f4:42:7a:ac:0c:80:1b:35:e9:4d:ab:9b:b3:6a:73:62:2a:
a7:fd:a3:37:b4:41:e7:09:e3:82:6f:87:83:e5:ff:8b:03:e6:
a1:9c:30:f5:c4:59:67:9c:97:52:ac:9f:d8:8a:17:1e:51:2d:
7d:22:51:d9:29:63:3c:6e:2a:5f:67:33:4f:57:bb:ef:d8:c6:
e1:ed:f1:d9:af:8c:a2:29:0f:17:35:7e:8f:5d:b1:61:23:d2:
de:b3:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:33 2025 by rpki-client