Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: kgr+u5DrBdQ/QZ+eqwx66ngPisiIhNknDMAsWkmIp8E=
Subject key identifier: 10:ED:7B:C3:CB:33:1E:F0:98:CE:2F:F7:80:D8:02:42:B4:6D:9E:49
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 0194BD17E1E04016F80EF2F397B5ACA92DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: W4iFXO2z1FWO4AtNKzExXN8Gvq6mWf7mNP9JKDlPLfA=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e1:e0:40:16:f8:0e:f2:f3:97:b5:ac:a9:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=10ed7bc3cb331ef098ce2ff780d80242b46d9e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:ae:82:5f:0f:06:19:c0:e7:c0:cb:2c:67:
4d:7a:b6:f8:d3:09:1a:90:b5:d0:0e:be:43:a7:76:
5a:15:42:20:f4:e1:9f:e2:41:85:27:37:96:0a:6e:
c6:49:1b:3e:78:d8:ae:b3:42:71:cf:ef:21:6b:26:
4c:28:26:5f:67:37:00:e6:0f:24:e6:d6:18:60:de:
07:4c:01:bf:2c:a7:d5:75:50:87:68:4f:ee:40:0d:
cd:f5:b2:5d:8f:62:9d:23:81:1a:6c:88:2d:0e:39:
54:bd:e3:d9:90:5a:2d:3c:d5:b8:71:a3:db:1e:26:
be:53:a9:cf:df:88:fa:a9:b9:0f:a6:72:b3:4f:44:
c1:3d:2c:01:2d:d0:f5:a1:bd:74:4b:59:bf:fa:0d:
1d:24:12:a7:7b:e0:4b:ba:1e:e4:ad:dd:32:ef:3f:
6c:fc:95:d3:5f:7f:61:02:1b:0a:83:21:67:ef:f9:
8c:ff:6b:3d:57:de:83:b5:64:35:57:78:42:99:00:
e2:16:fd:59:69:b6:39:e9:3a:ec:a0:e7:c4:89:df:
c2:c7:48:fb:34:de:d0:c7:d9:f6:76:df:bc:65:a7:
9d:66:6b:0e:72:d7:f6:4f:7a:a4:a1:36:0b:8b:6f:
ac:f0:d8:cb:61:d2:a5:4c:54:46:0d:dc:5a:bb:bf:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:ED:7B:C3:CB:33:1E:F0:98:CE:2F:F7:80:D8:02:42:B4:6D:9E:49
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:03:66:4a:39:f4:1c:33:e1:cb:b6:52:97:ab:6e:c7:20:24:
ce:13:8d:56:8d:3f:e6:b4:81:83:ba:69:77:ed:9b:00:b7:65:
ea:f3:66:a6:36:19:23:fa:8b:2d:d3:ee:9c:5f:d9:f2:bc:57:
1b:a9:60:8d:e4:ee:d8:e9:8f:6f:1f:0e:56:35:45:21:03:a3:
53:78:b3:be:44:a6:e5:18:ad:35:ee:98:46:d6:47:14:b4:9a:
f5:42:d6:54:c0:e5:9a:50:86:69:70:cf:d6:9a:db:b0:ce:32:
16:f2:19:c1:78:69:ab:59:93:15:c8:19:c5:8e:63:ef:ef:1f:
2c:d2:29:58:c6:a1:cb:b4:8a:3a:44:f3:04:e5:ae:e9:99:7a:
05:8a:4b:e7:a6:a0:1b:90:8d:3a:12:ff:45:87:99:73:e1:dc:
8e:c9:fc:ea:7b:50:6f:3d:e1:67:1b:17:df:82:48:29:78:2d:
d9:d2:c7:9d:15:b8:83:0e:9d:03:16:9b:f2:1d:f0:63:10:91:
f8:a5:ab:f0:4b:3b:56:fc:09:c6:9e:b6:77:4d:90:54:7e:61:
7f:a4:aa:69:39:e0:84:06:2f:0f:c6:34:53:6d:3e:9e:2c:83:
ae:7f:f5:be:6a:72:86:d7:40:10:64:58:9f:08:7d:3e:01:fa:
0d:82:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:10 2025 by rpki-client