Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: Xgi/0Aupb3DREQecn+HEcZCJyzW1pVRY497W/J/3kDo=
Subject key identifier: 0F:F6:AC:6C:07:1E:D4:EC:EE:AD:81:14:CC:E6:C8:AE:D0:72:8C:F9
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 0194BC3C83D8E1326CAC6131D7FDF9EBEB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0120
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: mYthj9D+HVi7RjkPKqzKB6rGMKLg9npQzAZjS/OwnP4=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:d8:e1:32:6c:ac:61:31:d7:fd:f9:eb:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=0ff6ac6c071ed4eceead8114cce6c8aed0728cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:02:33:77:50:dc:dd:09:0f:99:7c:83:d2:b2:
ac:90:1c:2b:cd:4d:bb:a4:77:1e:cc:1b:fa:49:be:
3c:02:ef:ed:9b:ca:03:18:b5:8c:b8:fc:73:95:38:
ac:b4:a4:c5:7c:6d:c1:a9:2b:4e:b4:50:fe:10:cf:
da:b1:22:c1:03:50:a3:28:41:3b:bd:93:36:f2:d3:
f4:62:d3:ec:91:fd:7b:58:1a:87:e1:bc:fa:cc:26:
66:1c:8b:e9:a1:da:6f:8b:f0:63:bd:9a:6c:cf:0d:
cd:33:60:b2:ab:43:bf:0b:53:32:b3:1c:16:4c:7c:
44:82:f3:c0:91:b7:20:78:9b:f1:1a:48:cd:4e:92:
35:6c:a5:71:54:a8:e6:db:61:fd:30:9c:94:b4:69:
39:22:e3:39:e9:32:a1:d8:bd:6a:32:b8:e3:4b:97:
4f:41:54:05:6e:74:be:08:f7:63:fa:a6:5f:5e:c5:
64:a7:10:11:da:de:90:c0:41:a0:0f:15:28:3d:30:
83:c4:42:13:c4:3b:55:3a:6c:76:9d:01:c1:ab:68:
df:59:ec:ad:11:38:4c:60:ee:7f:86:28:d4:67:40:
64:e3:de:7b:03:87:60:f3:a9:18:41:4c:ac:d6:3a:
e4:c8:9d:9e:17:8d:c7:31:5d:c3:ed:84:22:c8:40:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:AC:6C:07:1E:D4:EC:EE:AD:81:14:CC:E6:C8:AE:D0:72:8C:F9
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e3:eb:18:d8:ef:95:00:02:7c:0d:1e:2a:13:b0:41:fb:0e:
eb:f6:ff:23:c9:54:57:10:d4:fa:cd:39:2b:ff:e3:93:dc:65:
3c:a5:c7:30:0b:44:ac:cf:d0:fe:29:cb:69:d3:2b:0c:1c:1a:
34:9b:a7:cc:56:6c:18:1b:fb:96:4c:2c:3e:9e:34:ae:fa:85:
af:97:0a:7b:ef:79:b6:ed:c4:31:df:23:f4:3a:6e:90:f4:78:
9d:bf:bb:30:e7:10:62:91:9b:74:94:dc:55:cf:01:45:a1:ef:
db:8b:fe:6c:61:fc:b9:17:23:4c:37:1e:60:fc:3a:02:1e:0c:
b7:0a:5d:6a:5c:f9:80:03:08:c2:f6:7d:20:cb:2c:c7:e0:8b:
84:0e:6a:31:9b:5c:91:37:f0:a8:2c:0d:27:0d:e3:c3:bd:ef:
39:c6:ca:6c:5f:96:0c:0e:b3:aa:e4:a0:65:d4:e0:ad:86:34:
9a:be:15:d0:db:f5:95:35:55:31:c7:b4:f1:91:50:98:34:7e:
5b:05:ab:be:9b:a0:ab:e0:bd:62:54:87:ec:27:5f:7d:b8:7c:
2c:5b:22:e1:a1:84:2b:5c:01:4e:92:d8:6b:42:9b:4c:68:bb:
13:2c:14:13:9e:7c:5e:dd:ca:9d:8b:cf:1b:94:1f:20:0b:21:
d6:cc:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client