Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json)
Hash identifier: nUbmOnU46TBNQArOhU3m91fWGbFqpWuThnJOvIakSDI=
Subject key identifier: 78:25:DE:5D:0F:82:8A:99:4B:F9:27:A6:13:42:E0:6C:9F:8A:C5:6B
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 0194BC3C954948115B2F45DE153FA4AC24F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
Manifest number: 13EC
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (hash: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=)
2: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: QZ8msjELtGG6WXNFmb/pRifc6P2a59xeLA+hm95JrE8=)
3: qFCMzr1aTyDncgEMfMKtHZlAIvA.roa (hash: bllSYNros8BQdNxuVkEMmquNQHhaai0eIqAVCUsUK7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:95:49:48:11:5b:2f:45:de:15:3f:a4:ac:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=7825de5d0f828a994bf927a61342e06c9f8ac56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:94:98:9b:cd:ac:c9:d1:85:e5:11:4f:26:
15:74:6f:3e:c3:45:38:50:ab:05:23:5e:a0:56:52:
f4:30:23:fe:36:b9:bd:3f:3c:8a:02:a8:44:2d:01:
22:11:d4:49:ca:4a:34:4a:f4:29:c6:c7:59:dd:d8:
0a:ac:f9:e8:98:50:3d:b7:97:e0:43:e9:bd:6d:49:
b2:d0:31:7d:df:05:ff:d0:8d:fc:9d:66:15:40:11:
4f:f5:a8:dc:a0:0f:6d:3d:7c:06:11:a4:a9:03:57:
6f:ed:21:19:09:c6:f8:b9:f5:80:da:58:df:d9:cc:
4d:18:71:87:f7:62:88:ea:53:2a:a9:e7:28:7f:47:
ba:26:80:d9:fe:26:90:6c:10:35:97:9b:f5:3e:cb:
6d:03:0f:aa:39:05:4a:75:08:c3:2c:e5:15:ab:42:
97:e9:0e:82:e2:e4:46:ad:3c:63:e9:8b:bd:78:3f:
7a:ed:51:be:63:0b:5e:a0:25:5c:30:9f:f1:b2:1b:
58:da:2a:21:74:71:3f:72:a7:74:1d:a8:d3:a2:1c:
24:0b:59:38:46:cb:af:df:8b:7c:a4:72:80:28:ea:
d5:8d:c8:a4:3e:3d:26:2b:88:17:5d:0d:05:ca:7e:
60:f8:d8:95:d5:6a:93:fa:af:76:35:8f:62:42:f0:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:DE:5D:0F:82:8A:99:4B:F9:27:A6:13:42:E0:6C:9F:8A:C5:6B
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f9:a5:11:4a:ce:70:4f:41:1f:dc:8c:ac:70:45:bf:06:8c:
fe:5c:84:ce:91:47:2b:92:6d:71:48:f4:66:b6:8e:4d:d4:c5:
b9:6e:99:64:ef:3f:c4:19:c6:2f:8e:1f:03:c4:46:2e:87:ff:
ac:3a:a8:f6:c2:15:33:75:1d:96:e1:86:c3:84:ee:b7:cc:d7:
ab:38:87:2a:53:fa:9f:f7:e5:ee:12:37:79:5a:6c:3e:ac:17:
5d:0a:7c:7a:fc:90:87:84:19:78:0f:43:b4:88:ed:bb:93:9e:
27:b5:4b:28:a8:59:21:a2:f5:50:19:0b:bc:18:ae:45:a7:13:
6a:f4:f7:58:d5:22:53:4d:9d:e3:0a:a5:02:09:38:c8:1e:21:
54:71:3e:75:ae:63:6e:29:b1:f3:f8:90:1f:30:a2:33:8a:3c:
e2:73:c4:f2:48:f0:22:d7:54:47:c6:79:ab:cc:81:00:2d:6b:
49:be:3f:8f:8b:1f:2f:f4:e6:52:6b:32:33:70:60:6e:1c:0d:
c9:e8:1e:b9:31:92:ed:fb:18:5c:ab:23:46:9f:7f:84:b3:78:
95:f4:0c:6e:6c:e2:b5:11:cf:04:eb:e5:5b:a3:11:32:fc:27:
69:c8:61:e7:39:68:48:bd:7c:01:67:89:d5:6c:8c:64:a2:22:
f2:d1:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:34 2025 by rpki-client