Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
File: f_dNq9TrGqEUcUThWwJmnpgv3k0.mft (raw, json)
Hash identifier: 8tPK89HRMgpkNyYm4+NpkAfcYJ8cX2x2Mq9jlae6qgA=
Subject key identifier: 04:D5:2B:81:1A:77:1D:5B:45:8C:88:60:00:A5:68:45:DF:D1:AA:E1
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Certificate issuer: /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial: 0194BC04B389EB5871DA0E56B9567514F9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (hash: YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=)
2: f_dNq9TrGqEUcUThWwJmnpgv3k0.crl (hash: BUR3ZVYL4stBA5sXts9pcgFSMWNaQhGDeSN7bOZxI3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:89:eb:58:71:da:0e:56:b9:56:75:14:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=04d52b811a771d5b458c886000a56845dfd1aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:f1:c1:bf:d7:05:c5:83:40:99:4c:10:55:
b1:38:04:e4:d5:ec:1d:86:28:4a:0f:bd:c3:5c:5f:
ba:f0:a1:75:e6:fb:e4:a1:2f:09:be:c5:48:40:4c:
af:fb:7d:3e:57:c4:45:fe:3f:b1:02:52:c8:89:c3:
30:66:fe:81:58:c3:1f:d7:57:bb:38:a5:b0:da:9a:
d7:1c:2a:dc:23:d3:3c:19:29:f4:8f:48:92:7b:18:
c2:f7:01:63:fd:30:f6:cb:e6:f6:7a:12:af:df:c6:
75:96:7f:03:73:c4:29:9e:9d:95:d6:f3:02:43:d8:
84:f8:45:b2:c2:04:29:ba:e2:c5:fb:bb:dc:84:f2:
94:64:cd:dd:b0:2e:f6:86:5a:47:c7:07:49:c7:20:
58:ca:85:83:f0:eb:07:01:71:9e:94:48:aa:53:47:
0d:c9:69:4a:99:62:68:31:e2:13:f9:79:a8:f3:64:
f2:7f:1b:82:73:b8:dd:69:51:c4:d9:d7:17:6f:65:
b3:c2:e6:fc:61:26:47:93:20:3f:69:b1:2a:a4:e1:
2e:ee:9f:26:cf:b3:3d:e7:86:80:54:17:f2:b0:82:
77:09:1c:23:b0:b8:97:50:1a:c8:06:06:8f:a6:e3:
79:8f:09:01:be:09:83:ec:5a:21:ad:07:9d:0c:20:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D5:2B:81:1A:77:1D:5B:45:8C:88:60:00:A5:68:45:DF:D1:AA:E1
X509v3 Authority Key Identifier:
keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:7c:0e:e1:79:ba:70:84:80:5e:58:d9:0b:38:ad:62:92:
5b:8a:ed:39:e7:ee:3e:c5:d5:a2:23:3c:94:5e:28:5b:ea:aa:
3e:c4:e0:14:35:a8:5a:b1:b6:cf:65:00:09:f3:43:d8:e6:12:
45:a6:2e:f9:77:9d:e7:cc:14:d2:1c:f1:d9:6b:9e:a6:a5:51:
e7:09:3d:d4:81:c5:7f:6f:6e:f1:23:c3:8a:ff:d2:35:54:53:
56:43:c6:56:e7:9f:fa:a7:fb:95:78:d1:89:36:5b:a1:9f:28:
83:a8:d3:7f:29:fe:29:2d:93:05:68:ed:84:e0:13:53:0c:81:
d4:38:14:e7:40:29:3d:23:d0:87:ca:bb:9f:44:20:50:24:74:
a8:92:96:20:d0:4c:9c:9e:ae:7b:89:ba:87:55:dd:48:65:9e:
c5:28:84:fc:30:19:3c:76:09:e7:df:f4:1f:f6:62:4d:de:6b:
f9:fe:4d:fe:c7:82:69:dd:c5:7b:bd:7e:57:4a:72:6e:55:c0:
64:40:e7:93:01:bf:a6:ee:ef:f4:56:93:d8:18:17:b7:72:e5:
65:83:d1:35:9f:de:61:67:80:55:07:bc:5b:f3:5c:45:28:71:
e9:97:0c:11:2a:b0:75:44:f1:e7:73:48:ca:35:d6:19:e3:c4:
3e:c7:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client