Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: XH/nsbJU6oNHv9wr0m5KtikFlHwTg1ZgEy1KAgqvPi4=
Subject key identifier: B6:86:55:C5:CB:F9:94:75:F3:EF:37:16:BC:45:BB:F8:60:52:98:D0
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0194BBCE6AFB679274D76F9CD4A7CA1D1759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: 1yyjENKs/LV3mA78FLhFSxeABIIIhhEIF/WhMEQALNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:fb:67:92:74:d7:6f:9c:d4:a7:ca:1d:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=b68655c5cbf99475f3ef3716bc45bbf8605298d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:3d:e0:99:c9:4d:b1:f3:e5:34:d7:8e:75:
19:dc:4b:da:b8:4f:57:6b:29:2d:d3:f4:0e:18:9a:
fc:88:4b:5b:db:92:89:0b:f8:96:ac:33:f5:26:9d:
07:37:2a:a4:fb:68:00:c5:68:0f:f7:0b:07:27:ab:
c4:9c:d9:1d:06:06:ae:f4:0a:47:42:a1:b2:0d:92:
74:16:8b:fa:3b:22:39:00:5d:3d:b4:0b:9d:8a:3a:
62:8b:f0:1c:ab:7c:65:65:f1:34:d7:dd:bd:6a:ac:
9b:13:fb:82:8f:cb:22:a7:c0:da:09:e9:5d:f4:fa:
e8:5b:4a:48:f5:ba:df:72:37:1b:dd:bf:a2:0c:a0:
4f:a6:8f:07:45:a2:e5:a8:1c:33:c0:18:8e:9d:e0:
e4:5d:7f:78:7a:ba:b6:9a:3d:9e:ba:84:cf:83:a4:
e4:64:43:2d:b8:d9:c3:78:46:10:39:20:86:63:b2:
64:6a:1c:c4:52:99:62:34:4e:3e:23:a7:a0:7b:46:
20:e9:94:e5:4e:e7:9a:59:b2:04:e2:cf:8e:52:fd:
18:40:87:a0:ca:0e:0e:53:27:13:ab:fe:f9:be:46:
79:f2:78:67:7e:96:42:a3:1f:2b:cf:3c:a3:1c:fd:
aa:f1:91:0a:8f:a2:00:1a:ff:04:79:e1:ec:75:0f:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:55:C5:CB:F9:94:75:F3:EF:37:16:BC:45:BB:F8:60:52:98:D0
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f1:5f:c7:74:a7:35:d9:a8:19:cd:48:b6:74:bc:d5:4f:82:
ca:ec:1d:8e:e1:c4:da:ed:b5:f5:94:a2:9a:a0:9e:41:1e:46:
74:c0:71:63:03:ef:6f:22:38:61:c8:ee:ef:77:fd:56:cb:1c:
39:c0:8b:3e:f4:1f:89:dc:c7:ec:ac:b8:cb:7a:41:ba:93:8a:
6c:46:47:ee:a2:ea:3a:53:ff:21:28:96:66:a6:e5:a0:34:ed:
c2:2e:fa:8e:5d:f6:80:af:a1:2e:e7:94:af:63:d3:19:f3:75:
6e:74:95:39:31:ca:74:d8:88:5c:39:66:7c:b8:8e:48:ab:a9:
2d:36:3e:93:0a:b9:5c:7e:19:54:5d:70:fb:24:ff:25:88:7b:
4a:14:b1:d5:b3:63:37:b7:d6:2c:a4:87:b2:e7:0d:a5:70:a4:
db:13:9a:3d:56:5a:d9:99:bd:64:7b:62:c7:df:f8:61:ab:a6:
03:ef:a1:21:4d:19:bc:cb:ed:a0:ce:e8:92:fe:59:5f:b0:27:
f6:b5:0f:f3:11:63:83:75:d2:e0:de:59:c7:08:98:01:4e:29:
eb:ed:49:22:6a:cb:41:5f:d1:9e:90:84:05:b5:3b:b6:ba:fc:
5b:61:81:7b:e8:51:d9:07:e2:0d:9c:23:df:0d:0a:de:fd:b2:
e9:b0:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:30 2025 by rpki-client