Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: f3MiRORZNuqzTA+ZVdHyDBCrx5KKg3zfp1CVvsYTzUw=
Subject key identifier: 64:F5:C3:6E:96:94:86:6A:17:BD:4B:F7:52:6C:25:3C:DD:7F:D9:06
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 0194BCA9B961D4631FA018D4B116F427DEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: h0LoIAWmaSJKbgNiqfZscehWrizVtoO86XblaaP0obE=)
2: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (hash: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b9:61:d4:63:1f:a0:18:d4:b1:16:f4:27:de:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=64f5c36e9694866a17bd4bf7526c253cdd7fd906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:a5:5c:a4:5f:31:79:b6:cc:9c:bd:47:7b:
95:40:3b:17:58:02:41:5c:9b:d9:54:58:1c:76:df:
9b:10:7a:0b:96:3f:d7:e8:22:3e:40:93:08:75:b2:
c5:53:5c:9c:3d:e4:31:78:7a:21:ce:eb:a5:cd:ac:
f3:d5:f0:61:0c:ac:b6:d7:f7:95:ac:f2:65:50:b2:
8e:be:41:a9:a5:e1:3c:49:04:67:e5:f7:a6:63:87:
b6:7a:0e:75:90:39:2d:00:c2:09:6e:6c:34:6d:5c:
29:c8:7a:19:06:ab:4b:2f:be:89:d9:d9:2e:25:0f:
09:d8:7f:b2:a2:a1:21:8d:1f:66:fe:e0:16:8b:36:
f9:72:b2:76:ff:72:b9:ea:d6:78:32:db:fd:7e:2c:
b0:66:a9:88:18:ef:e0:dd:a8:e3:8e:7c:72:16:99:
0a:e8:69:ed:b9:d8:64:0f:d9:04:aa:51:13:ab:cc:
99:ad:a7:fe:77:69:55:79:e8:6b:68:67:57:c5:a9:
64:43:72:cd:d1:44:61:d7:89:80:df:5c:b5:b8:fd:
79:25:00:62:e6:85:a0:c8:85:24:2c:cb:a4:be:a6:
3f:f9:13:ea:5d:bd:34:51:43:19:32:96:b0:fc:5a:
ef:9a:68:f6:59:b8:b6:04:4a:54:db:49:72:7e:6b:
cc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:C3:6E:96:94:86:6A:17:BD:4B:F7:52:6C:25:3C:DD:7F:D9:06
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:f6:0f:a8:42:d2:72:0b:82:e6:3e:41:36:09:06:f1:b3:
57:48:ea:ad:8f:8c:74:7d:bd:cb:9f:8b:0e:f1:2c:20:27:3e:
7c:ea:52:73:35:68:38:0f:5b:1d:3c:e6:01:d3:92:4b:04:64:
2d:b9:c4:53:de:f5:57:8a:34:81:de:ab:5f:59:d2:4d:f9:84:
74:16:6b:a8:e6:d1:1f:12:ef:68:72:56:0c:c8:d4:b6:43:03:
15:85:a2:8d:2a:78:e8:54:8e:70:3a:34:0c:8f:f0:e0:a6:82:
0a:6b:6e:af:90:f2:c0:f4:3e:1b:45:65:8a:da:6e:05:5b:90:
aa:d1:d1:0c:b7:15:d6:fa:ca:d1:34:63:70:65:aa:28:82:ce:
e6:d5:0d:40:cc:b9:ce:f0:7c:50:28:e2:f1:da:03:f8:03:59:
6e:75:48:55:43:fb:72:d1:23:65:7b:e0:8e:7c:74:1f:c4:32:
a1:1f:40:22:c2:da:23:dd:89:2e:9c:a0:fb:1f:e4:a2:33:c6:
ff:89:c0:4e:91:99:b5:06:67:6b:cf:c7:24:2f:ed:73:4d:27:
3e:99:83:fb:4b:fc:26:8e:36:94:a3:03:57:31:56:7a:81:f6:
81:46:dd:97:66:cd:74:3a:fc:1b:6a:03:76:b0:f9:24:ac:29:
bf:01:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:51 2025 by rpki-client