Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: fHGzMHdvZtJu01KRQd0bbTPyS0nqssr6BgG72yHJSjI=
Subject key identifier: 3A:6D:CE:97:DE:1D:7A:F0:8C:7E:74:23:F3:49:75:85:BF:D2:65:75
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 0194BD85998950602536A9F4C84FD5EC5470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 1167
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: qpKMVuxkFks6WZmaJ/lL+MalSq4yKn0gpPZVWJrP/Pc=)
2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:89:50:60:25:36:a9:f4:c8:4f:d5:ec:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=3a6dce97de1d7af08c7e7423f3497585bfd26575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:a0:59:0b:1f:1c:d9:c6:77:59:25:80:53:
11:3e:f6:9f:a7:08:a6:1e:1c:f5:b0:3e:33:95:62:
08:84:03:30:c9:5a:3c:82:fa:80:6c:b6:59:8d:8b:
0d:0c:27:a9:68:57:cf:d7:65:4e:f0:e4:04:ff:4e:
93:9d:59:8c:a7:45:c8:a8:f2:f1:f1:53:37:ed:25:
79:6e:cc:68:b5:d4:e8:dd:e9:fb:33:1a:17:a0:23:
80:ec:4e:b5:e1:82:d3:71:aa:b3:a7:00:a6:b0:c6:
d2:aa:fb:94:32:4e:bb:11:83:fc:34:ba:c8:a0:9e:
b6:0a:b6:10:e8:9f:f9:f5:ac:f8:0d:15:03:53:0a:
c0:39:1e:45:1d:f6:5b:91:a8:e2:13:61:b3:ec:a8:
8d:92:27:be:8e:fa:26:52:04:90:21:bd:5b:56:2f:
95:61:ca:8f:d0:19:79:f2:b5:49:0e:ea:3b:5f:6d:
01:ea:3d:2c:56:00:4b:bd:02:d2:f5:f7:69:12:03:
cd:96:91:0f:4c:d6:f1:1e:fb:e5:87:22:64:28:55:
1c:29:3a:70:19:a5:14:e6:97:34:eb:fa:5e:1e:97:
99:2e:98:a4:5d:c2:71:fc:28:a3:58:6e:ee:ac:9f:
55:5c:29:df:94:09:85:ae:a1:07:a4:a8:f7:29:57:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:CE:97:DE:1D:7A:F0:8C:7E:74:23:F3:49:75:85:BF:D2:65:75
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:71:c8:29:a0:02:6e:d7:19:1c:87:5c:92:3a:a3:90:26:0d:
3b:0f:ac:e4:2d:be:93:4b:88:ef:ec:13:d6:35:01:03:c5:c7:
e9:63:14:8e:67:d9:e8:aa:59:41:d2:2d:f9:da:4a:7b:23:f0:
4a:f6:2b:2d:f8:25:76:48:ab:42:5a:29:79:69:4e:24:a0:2a:
18:62:0d:4b:50:5f:e3:0f:8c:ed:c0:06:2d:93:69:8d:4a:d5:
a7:19:62:c1:37:af:88:b6:91:b5:ec:25:15:cc:01:d3:ad:09:
ca:a1:a9:44:aa:40:3e:a0:08:c1:38:15:c8:a2:04:b7:a7:29:
6e:16:93:81:db:a3:8b:a5:ab:78:74:e6:01:56:9b:d2:b9:9d:
ba:5e:d9:1c:d3:66:ec:1f:d9:73:c7:84:2c:99:3f:54:f7:df:
6d:d9:46:f8:b9:0f:7b:c8:32:7f:f2:33:cf:67:f6:64:76:a0:
14:ca:29:20:72:83:5a:88:e4:74:dc:19:9d:e0:f1:4d:12:4c:
cd:9b:77:c8:f6:fe:2b:3e:e8:fd:aa:97:64:d7:ea:f8:e4:34:
1b:57:e2:5f:c1:46:6f:59:ff:be:a9:73:be:2f:2d:86:47:e0:
0e:d4:c8:1a:db:a4:c9:12:c6:76:a4:13:ed:92:dd:f3:74:f3:
05:6a:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:06 2025 by rpki-client