Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier: yxa7uw+SVs7EnHL+akXjKccKxUzk3eNurgQkgEXMWhU=
Subject key identifier: 08:DB:C7:DC:7F:20:7C:DE:38:73:8B:CB:11:2B:51:90:5E:31:3D:02
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial: 0194BBCF078D1B464F80E989633FED97EC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: TCK+xiIXGzJwy2Xr0g8cV76NhCh/8epLLALtgNtbcn0=)
2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:07:8d:1b:46:4f:80:e9:89:63:3f:ed:97:ec:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=08dbc7dc7f207cde38738bcb112b51905e313d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:9a:63:e9:cc:af:6f:4d:17:22:ac:ae:ec:
5f:f8:97:d1:75:78:98:7e:4a:23:41:f1:2e:78:e0:
d7:0a:6c:8e:17:fb:b3:bc:89:90:e6:bc:3a:f6:0f:
e3:26:ff:7d:51:16:95:b2:8b:62:6d:4a:d1:2b:18:
98:06:2d:24:07:6e:bf:f8:d2:32:3d:f0:33:ac:23:
bf:10:f1:68:df:53:46:3e:30:84:d3:9e:d2:fb:eb:
ef:22:17:83:88:39:ee:0d:80:d2:c6:93:cd:51:27:
6e:a7:e8:f6:33:94:cd:2a:3d:01:36:13:2d:b2:3c:
ed:eb:5b:56:ab:32:e5:07:b4:15:d1:20:32:4e:a8:
a1:bc:d2:8a:b4:b5:7b:5b:f6:ab:7c:76:51:29:69:
39:1d:df:5b:43:d1:58:9c:ee:02:34:9e:f4:6a:63:
cd:d1:bf:71:29:ed:a7:90:b6:c9:c4:9b:a1:3c:4d:
dd:90:c9:a7:35:ac:f5:2b:fb:31:16:c9:8e:ff:2d:
12:40:7f:4e:d7:01:df:1b:95:74:51:1a:56:24:b9:
56:e1:fe:7a:7a:be:18:45:40:99:5e:01:81:f7:dd:
ef:9a:a3:f9:ce:7a:45:02:b9:bb:a9:9c:4b:ba:31:
cc:96:8e:25:ad:b2:d1:73:0c:cd:bc:00:cd:29:6f:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DB:C7:DC:7F:20:7C:DE:38:73:8B:CB:11:2B:51:90:5E:31:3D:02
X509v3 Authority Key Identifier:
keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2d:a6:40:8d:fd:fe:ed:92:6a:98:39:ca:7b:9f:52:58:55:
27:79:6b:0b:6b:0b:5a:69:c8:3b:15:35:ea:ce:ba:8a:71:9a:
c5:77:9a:94:f6:ff:03:a2:29:51:43:6f:8d:98:96:1a:fe:b9:
f6:20:12:9e:d4:f0:3e:e3:fb:0f:0c:11:ad:41:cd:52:a5:b4:
a6:18:85:2b:63:d0:20:83:02:7e:a9:f9:b7:0a:24:47:48:26:
7d:8b:72:70:49:6f:5e:40:df:04:56:4d:01:a8:f4:04:d7:b0:
ee:8a:e0:a1:1e:64:7e:e7:5d:07:13:b2:87:17:c4:33:83:cc:
6d:11:05:f5:6e:ea:f7:1e:81:10:1b:e4:e4:f4:7c:86:78:58:
94:7a:c1:54:bf:df:6e:35:bd:e5:f3:07:1c:88:4f:fe:a2:62:
5c:1a:52:6b:eb:01:5f:71:6b:fd:c6:40:55:2f:ed:f3:8a:b5:
44:3c:a4:9f:fd:e7:36:82:7c:e6:16:0c:b2:9c:26:a9:be:b0:
5d:23:cb:a8:7c:a8:9d:f0:87:b7:6c:61:8c:6f:81:32:a5:4d:
94:62:d8:48:8e:71:8a:47:a6:11:39:32:17:35:fb:1b:9e:95:
71:84:54:42:08:90:92:c6:c3:8d:4f:b9:20:88:ec:ae:d4:75:
2c:82:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:02 2025 by rpki-client