Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: g/mQex9bEU1r0ocfWgIfiIDeM5HdPHlEM3opAh+7fFs=
Subject key identifier: D8:9F:B6:2A:A5:D1:59:56:84:E5:3A:44:38:66:2B:1D:E9:A2:48:DB
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 0194BD4E80F738B3F946277C45BE63029EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0B53
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: h1761YVvVwsq0D06hR9typz7o4w9Lbu6mbHv8BBsYMo=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:f7:38:b3:f9:46:27:7c:45:be:63:02:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=d89fb62aa5d1595684e53a4438662b1de9a248db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f4:a2:5a:7b:ce:a1:46:ed:87:a2:13:b4:14:
8c:f5:ee:0d:0e:9d:23:0c:bb:ff:ff:83:1c:b2:52:
70:37:91:b1:e9:5d:9c:52:5d:86:da:fe:58:fc:54:
1c:59:18:33:a9:45:2b:ec:4e:68:8a:fa:f8:88:7f:
b4:55:73:2f:ac:53:31:6b:04:87:72:04:c5:fd:e2:
51:25:10:ce:d2:af:54:b4:b9:7c:ce:d7:f8:44:6a:
e5:e4:08:16:26:4c:35:21:41:6d:db:5b:5f:a6:51:
a8:63:22:98:36:39:f3:bb:4b:14:dc:be:e7:76:50:
de:e1:59:d2:4b:72:2a:d7:98:89:d7:2d:64:7c:05:
46:4b:13:99:d4:f6:5e:67:18:78:ad:15:6f:c9:7d:
d8:3b:63:81:e4:8a:73:91:d6:ee:d8:06:46:d5:72:
b9:52:f3:df:fa:d8:3f:01:91:55:06:be:f3:31:e8:
7c:7e:38:a7:ff:bc:02:1d:e5:68:1a:da:03:f3:f2:
ad:7a:3b:bb:90:44:db:b2:d9:f7:b5:1b:71:ad:83:
13:44:76:7b:d9:eb:0d:87:3b:36:f0:05:10:36:b9:
1d:91:9c:73:61:98:2a:f6:40:54:23:b1:d3:52:9d:
6e:eb:71:11:80:b0:e8:ef:7c:0d:85:c4:5d:19:6e:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:B6:2A:A5:D1:59:56:84:E5:3A:44:38:66:2B:1D:E9:A2:48:DB
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:41:8a:12:00:97:4e:0a:1b:a0:cf:5d:5f:c1:ce:35:48:
03:1b:42:44:7b:11:e8:95:66:f9:db:4f:84:53:e0:05:aa:2e:
44:98:2c:75:e6:d8:92:d1:55:e5:9e:39:0a:22:4c:65:93:67:
31:fb:10:fe:e5:d8:7e:3f:34:5d:5b:15:02:dc:d2:5c:fd:b9:
93:28:d5:c2:59:4e:92:08:f7:c0:13:9f:67:0a:18:b9:b1:f3:
c0:7e:24:e7:63:b3:e3:1c:67:f0:54:b3:77:c8:a2:aa:cc:e6:
80:f4:e5:2a:d5:34:39:14:c3:ab:13:56:dd:2b:6a:ba:be:c7:
47:a5:2b:74:02:fa:40:85:db:9b:6b:e6:b8:2c:bc:bc:c8:9e:
70:89:c1:e6:59:56:6e:6a:96:9b:e9:30:53:5d:a5:5f:e3:a9:
1b:f9:d7:11:af:26:68:b5:2e:71:15:c6:85:cd:2f:57:a6:ec:
a4:45:09:4c:2f:25:43:d4:f8:bd:35:d4:56:e3:3f:3f:b9:47:
76:a0:45:ad:c5:a1:26:13:95:f3:b4:f9:3e:0f:1e:3a:fe:87:
d3:f7:78:5b:ca:83:dd:b3:90:3b:dd:16:63:f8:4f:29:94:76:
1c:ab:ee:ee:c6:3e:11:95:37:b3:f3:6b:a1:57:ba:4e:ff:9c:
79:67:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:23 2025 by rpki-client