Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json)
Hash identifier: uVzR+jEhC8X2EhYsins+ULjzkB3qRDoc2+NZrJnhwO0=
Subject key identifier: C6:4A:62:22:4B:95:82:E9:CA:BF:25:32:3D:84:1C:1A:21:DE:9D:55
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0194BC729689BB181BC80E2C31FF9D27AE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
Manifest number: 0CD3
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 6b7kBGmYZLhc9LKzN0zK6QfVRJI.roa (hash: Zx9aCYyscJGyVME/qhIE4KO8zEZC10I5Gx1MaCntTPk=)
2: 9h-8iHFf4wOmtCi8sb1JQBZuZqQ.roa (hash: exzFMu4zDpKXPU4eL1lGyDxeGEPeQKinq99RDRGcm/0=)
3: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: VI/tkC3KIGYk2XwR/fSkd6kT7l9kXmAQWLpnFkZ9C+U=)
4: nEjiJB0-mMQQFPly2WwOZs3c7-g.roa (hash: h3cZJSMuoJivO2hCuquZpiVDcLYaby3om3eBFcGBGrw=)
5: oAQbc7e5xC1GEdxN3e0gpd6isJc.roa (hash: EpNAPaM5v5pIwKbv54j32anzeSgMzbAB4ScT24Zr/1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:89:bb:18:1b:c8:0e:2c:31:ff:9d:27:ae:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=c64a62224b9582e9cabf25323d841c1a21de9d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:8e:9b:85:79:09:bb:ba:0a:11:62:02:f2:
9d:4c:8f:a2:70:fe:ff:00:c5:fc:f4:be:b2:65:bc:
62:d3:7c:fb:65:fc:13:85:bb:c9:ca:77:01:32:27:
c2:44:8f:c3:ae:f7:54:b1:af:9f:42:9b:ab:2a:71:
87:37:b5:8c:d0:a2:63:3d:55:83:65:29:8e:82:fe:
d0:f1:15:36:ec:76:05:7c:bb:a3:ff:b0:09:73:f5:
79:db:ec:bc:10:71:e9:dd:4f:ff:21:53:d7:9c:da:
67:27:f3:6e:63:ad:eb:3b:d4:de:df:b2:c5:e3:b0:
43:89:cb:a1:cc:66:d6:67:a6:44:5e:49:b9:45:99:
16:78:ae:ae:a7:c9:1b:cc:e5:51:19:17:f7:9c:06:
40:9c:40:af:9f:64:66:89:ee:af:03:9f:85:4a:c6:
cc:22:42:77:2c:d6:df:51:95:20:cd:92:88:e6:42:
53:b6:10:c9:d5:2c:5e:da:c6:22:d4:de:dc:a6:6c:
e7:07:b5:f5:2a:69:7c:57:be:24:38:3c:61:bc:60:
d2:80:db:49:0e:b4:a2:6c:ee:d9:94:fb:b7:bb:d4:
99:5a:88:c1:ad:49:fa:d1:d0:0e:34:6e:ae:b6:b1:
5e:78:80:a4:8c:c7:e1:94:f2:bc:91:0f:31:e4:82:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:62:22:4B:95:82:E9:CA:BF:25:32:3D:84:1C:1A:21:DE:9D:55
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:da:03:d3:55:07:57:2f:8b:ca:94:3d:da:66:8e:ac:e1:
e3:6f:88:9e:7e:2f:07:05:1d:87:09:30:06:4d:e3:c1:b2:c3:
c4:4b:6f:4f:6f:d9:bc:c3:07:0f:28:d7:23:e5:02:00:20:50:
b6:23:5e:fc:9d:75:c3:5b:c3:ff:fc:80:86:94:0f:3f:48:59:
e8:49:92:ac:9b:0c:f9:ab:88:d5:de:c7:e0:5c:f4:57:b5:4b:
21:76:f5:70:67:f3:ad:ca:28:d9:ce:d9:52:ba:09:03:37:01:
09:0a:90:10:2a:93:05:75:4d:e1:20:09:d4:30:d9:8b:3f:ce:
49:22:37:fd:6e:de:ef:da:2b:c3:4c:47:3a:7b:5d:d1:47:62:
cf:c8:02:de:d5:38:a1:0a:f0:e4:9a:69:d8:b3:db:62:87:88:
94:77:48:ce:98:de:8e:f2:a6:f5:f7:dc:3d:eb:57:0a:3d:f2:
ec:c0:f2:f5:0c:7e:97:7a:f9:42:ba:f2:20:87:02:e0:12:16:
84:e0:25:9f:b4:97:1b:d6:12:9d:b7:b1:d4:ed:6c:da:3a:0d:
97:fa:9e:32:e9:53:d9:ab:7e:e2:fe:e1:8d:c2:8f:4c:bf:a0:
4b:7b:f0:79:6a:b1:fa:97:c5:92:a3:f6:f7:55:71:48:5c:04:
a3:af:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:10 2025 by rpki-client