Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: xMGKKE3jXYJavYeYk6SqA4QrG2B/fmvR/Sf0+9/GCIg=
Subject key identifier: D4:3E:4A:EC:D7:FE:E4:9E:51:54:BE:0D:98:E1:E0:40:D8:32:05:46
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 0194BC04EEA861E74D88581C744D79AD2D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: VCDnII8QLsrVCjOyXpQ8ZOj2WIOiAriK0W5/nohghaQ=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ee:a8:61:e7:4d:88:58:1c:74:4d:79:ad:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=d43e4aecd7fee49e5154be0d98e1e040d8320546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:2e:05:92:ef:34:3c:39:9e:82:00:8b:40:
32:79:aa:ed:90:42:40:ba:4a:53:db:df:80:64:54:
b2:20:d4:79:eb:58:52:1d:52:9e:36:de:d9:42:5a:
47:3c:98:cf:10:d4:64:8b:83:a1:ef:4a:6d:f5:18:
ed:3d:96:9b:b7:6e:be:7e:1f:a9:e0:b7:dd:31:9e:
bb:dc:3a:0e:c3:4d:70:f2:fb:ad:17:ab:09:e4:d5:
9f:c1:fa:14:21:e0:7a:93:d1:4e:13:0a:12:55:b1:
e2:e6:02:35:8f:4e:a1:dd:44:74:88:1f:7c:95:45:
26:61:ba:bb:9d:2f:e8:5a:9b:96:29:ff:01:63:79:
87:68:3e:90:39:58:30:fb:a8:35:c2:0e:d6:34:44:
60:88:b4:1c:85:86:1d:33:84:fe:7d:64:29:0b:a2:
a9:ca:6e:54:34:eb:c6:d7:43:c4:c2:dc:46:96:7c:
2a:e7:32:e9:b6:3a:97:4f:c6:40:18:38:43:6b:bf:
b2:ec:60:d6:05:b8:ba:05:a8:70:8a:c6:43:d8:f4:
fb:01:00:32:55:1f:7c:ae:9a:4c:ae:82:68:d0:a7:
ae:03:65:f6:bb:e7:48:94:ff:6b:23:c5:97:87:73:
f4:f5:ab:37:5c:af:fe:32:f9:b9:9e:2d:aa:b5:74:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:4A:EC:D7:FE:E4:9E:51:54:BE:0D:98:E1:E0:40:D8:32:05:46
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:28:23:ab:a8:00:95:bb:9a:f0:be:97:73:b3:8b:40:43:b3:
f6:64:a3:de:a8:06:ba:24:f2:32:ff:84:8a:05:64:d4:88:15:
40:e0:ca:16:84:de:c9:a1:25:4c:2f:52:70:1a:0f:f8:76:39:
66:af:09:e8:d4:ae:75:13:4f:72:b0:c9:78:31:c8:09:a0:86:
4a:73:ff:d1:07:5d:97:68:f5:a7:2d:d7:fc:11:e7:d6:6a:10:
c3:62:d6:87:2c:ea:3f:a5:3f:1f:ca:19:7e:6c:a4:59:11:a7:
b5:8f:b2:2a:c5:ed:2b:15:73:86:0e:ab:92:1d:ba:35:b1:2c:
5c:7d:77:17:0a:a1:17:41:32:ce:0a:e8:4d:c8:44:d5:e5:e3:
2a:37:fc:6d:32:9b:40:d4:db:64:8f:d6:eb:cb:05:23:c6:e0:
a1:9b:06:20:3b:bf:06:0b:09:6a:63:37:1e:ef:b2:dd:5c:b1:
ab:b4:90:64:a7:86:1e:8c:f1:c3:84:09:01:90:13:ea:88:34:
e2:94:cf:91:48:17:f8:4b:23:3a:22:ba:a0:34:73:f6:9d:03:
4f:ef:8b:31:00:2f:33:35:cd:a9:45:56:7e:80:77:69:b6:4f:
9f:a0:00:0a:26:d3:0e:88:8d:67:5e:75:24:7c:a6:07:f2:b3:
38:f1:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:17:22 2025 by rpki-client