Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
File: dLM_sg3VV80LFO3-EIgPDg0hxSk.mft (raw, json)
Hash identifier: mQ7TT6NyMmuzIM8dJIk3NqMhxD0HmDccDR4JxwF4GyM=
Subject key identifier: 41:BF:D0:6D:1C:B1:41:B3:E2:DF:D5:F9:1F:76:B9:40:71:D2:A8:2A
Authority key identifier: 74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
Certificate issuer: /CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Certificate serial: 0194BC72E99B548B8FF17C731B08FA4E98E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 7XzhjrOg-Z7qBV45mobEyhWoPO0.roa (hash: PcT7axGWrzmC1UC4BdMVD7KNq4KOcnvcH7qwOmp2S40=)
2: JmU1zZ_s32x0xTiVO1Ld5c9a0iE.roa (hash: bYm30H+hk6LyQs89QWpfVlG6uGHxd4o6fuhs92pT8Og=)
3: dLM_sg3VV80LFO3-EIgPDg0hxSk.crl (hash: giucxYIRH2+hhQLPqlyTXT4TCvZ4RKUi66LLGKmBoFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e9:9b:54:8b:8f:f1:7c:73:1b:08:fa:4e:98:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b33fb20dd557cd0b14edfe10880f0e0d21c529
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=41bfd06d1cb141b3e2dfd5f91f76b94071d2a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:19:3b:5a:d9:00:21:83:d2:d2:3d:1c:dc:
27:40:f3:85:39:9e:81:16:4e:de:51:ac:29:27:81:
e7:b5:7c:b4:45:fe:96:42:c4:2d:e7:81:e8:31:96:
49:ee:36:00:c3:88:7f:4a:45:aa:13:ab:24:a7:1a:
e5:5c:fc:cf:fa:25:60:b1:e5:8c:3c:78:a4:e3:92:
0a:18:69:b8:9c:fd:0d:05:ea:1f:9d:ea:90:d0:88:
18:b9:0a:fa:8d:18:f7:c8:32:c0:0f:d7:cb:a6:98:
8c:84:b1:db:ab:ee:2c:b5:88:41:7c:cb:82:75:b7:
81:22:2d:81:d8:82:63:90:67:3d:ac:0d:ae:1f:c3:
a1:82:67:08:d4:2c:55:bf:dd:41:61:8c:2f:36:fb:
d1:6c:6c:72:d2:9d:a6:2b:b2:3a:fe:3c:69:03:94:
12:21:85:1a:ad:12:1d:be:ef:e5:95:ac:64:ed:45:
d8:0a:6a:cb:48:e6:db:bb:5d:21:c6:fd:2f:bb:e5:
e0:d7:f4:44:85:a4:fc:d0:6b:31:ab:19:a8:5e:7f:
f2:96:38:78:12:24:6e:03:51:b8:47:76:95:89:7a:
3d:d6:ce:fd:26:6e:16:45:ef:d6:60:f4:1e:d6:13:
09:a3:e8:13:0d:67:bc:93:63:7c:30:10:e9:12:92:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BF:D0:6D:1C:B1:41:B3:E2:DF:D5:F9:1F:76:B9:40:71:D2:A8:2A
X509v3 Authority Key Identifier:
keyid:74:B3:3F:B2:0D:D5:57:CD:0B:14:ED:FE:10:88:0F:0E:0D:21:C5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLM_sg3VV80LFO3-EIgPDg0hxSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6ee9d-756f-437e-bc03-e703e94b7beb/1/dLM_sg3VV80LFO3-EIgPDg0hxSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9a:60:93:e3:db:1c:30:09:c5:40:d0:67:8b:8c:24:0a:f4:
67:e9:9e:89:14:64:7e:37:f3:fb:db:3f:64:54:c4:15:9a:08:
70:28:07:f9:d6:a4:5e:8f:da:8a:9c:4e:32:4d:f1:a6:ca:1c:
f3:2e:15:b8:9e:07:32:54:c1:58:ba:c2:c1:27:63:c9:3f:a2:
c7:12:01:a8:ef:f2:96:1b:21:12:a1:d4:3d:07:62:4b:3e:e5:
3e:eb:4f:47:ca:f2:8d:e5:59:73:cd:a2:9f:87:6c:c0:12:22:
9b:4d:df:fd:b6:ff:71:56:c3:1a:f9:41:e0:d0:c7:b0:e5:fb:
f2:99:e2:86:be:ed:a4:12:a8:6c:e6:58:5e:11:44:1f:99:78:
3c:aa:85:20:5c:ea:8e:56:08:47:86:0f:78:b0:72:26:4e:3a:
3a:c4:2a:15:09:6b:22:60:42:51:4f:76:7e:0a:7e:e2:df:64:
09:a6:2e:33:38:5c:28:56:26:a4:d5:8e:f0:71:42:a7:55:e5:
db:84:26:80:fb:26:8f:2d:93:25:4c:00:bf:eb:5f:47:4f:61:
d8:d7:c8:23:90:af:b3:2e:cc:96:2c:c7:78:cd:50:26:e0:a2:
d2:46:b6:ae:82:45:3d:53:68:6e:05:97:25:12:55:e2:54:bc:
c3:db:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:21 2025 by rpki-client