Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: Qz+kPYyw7pH6KkoS1iErOH57rgwDGCelR2t8wy69GKg=
Subject key identifier: 04:DD:74:F9:8F:10:01:86:BC:D6:ED:BD:C7:58:78:73:ED:7A:77:6F
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 0194BD859B4D99AAA47F3D00B8988C64E962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: mrjInd6CSZ7cxSveVNO/q7kBRLpEDkuwuIQbDDhE6Kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9b:4d:99:aa:a4:7f:3d:00:b8:98:8c:64:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=04dd74f98f100186bcd6edbdc7587873ed7a776f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:f1:8c:c4:9e:e3:c7:d2:5c:d2:07:50:9e:
51:b7:18:7c:ef:6f:47:ee:2d:77:4c:d6:7c:55:55:
71:2c:d2:2c:54:55:6f:fe:4e:9c:80:cb:62:42:2d:
49:1c:8a:74:46:73:20:79:7c:8e:43:27:3c:bc:ed:
26:cc:d5:bb:f9:fd:3e:bc:42:00:76:ce:0f:34:fb:
1e:a5:6a:86:a5:f7:29:94:39:59:47:8a:ca:88:3a:
f1:b0:cc:0c:9c:7c:52:c7:77:b9:c0:73:bf:97:d8:
42:87:de:8d:7a:cc:02:b3:83:49:8e:2b:df:38:e8:
fb:ca:5e:ff:1b:de:ec:8f:1a:31:1a:6b:fa:b7:4e:
ea:c8:ac:35:c3:40:13:b6:ac:34:95:76:65:c7:22:
21:f1:27:a0:18:64:63:69:a4:72:92:35:bb:74:24:
6b:9e:e9:3f:8d:b1:a6:48:b1:7e:88:a9:81:93:96:
26:6b:a2:f1:f3:cb:28:c2:a6:51:c8:de:45:ff:8b:
02:5a:b3:41:6e:fa:fc:9c:ae:58:da:03:8a:6f:8c:
8b:7b:59:ed:a4:45:46:92:1b:fb:03:75:fb:c6:36:
3f:69:2b:29:bc:9a:84:a9:96:4e:ae:ca:02:7c:2a:
7f:63:db:ce:8d:29:79:bd:a5:2d:b2:3b:a5:eb:81:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:74:F9:8F:10:01:86:BC:D6:ED:BD:C7:58:78:73:ED:7A:77:6F
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:df:c6:c7:22:19:6d:9a:d7:f7:22:d2:61:e8:63:5f:96:df:
4e:9f:a1:60:8f:ad:b0:0e:c5:d1:ec:a0:6f:6b:8a:d0:46:bf:
9d:65:57:8b:80:66:c2:5c:29:5b:02:59:b0:d4:08:93:3f:0e:
e2:d3:f2:27:59:5c:5f:6a:5a:2c:47:d4:66:1b:3d:9b:a6:7f:
5d:95:f0:d3:83:67:73:2d:21:4a:5b:5c:66:87:2c:db:29:3a:
6d:d8:0b:44:4c:6d:ef:ec:9b:5c:41:2a:c7:9f:32:3d:6c:ae:
3a:12:38:6d:ff:fc:4a:64:cd:e1:d8:6d:b6:10:81:1b:47:b3:
c0:a2:7d:79:53:c5:d0:4e:21:42:18:5b:ad:72:14:17:1c:6d:
a1:5e:ab:d5:35:07:aa:2f:87:82:4d:03:13:68:13:f7:b3:e9:
1e:14:74:ae:d2:56:ef:52:4f:96:4f:1f:ff:99:c7:d3:a1:6c:
36:dd:0b:85:75:61:29:51:d8:d7:77:c9:84:af:4f:f6:bd:15:
97:b6:37:b6:a2:de:2d:4b:20:d1:82:d4:28:b4:24:c2:4f:7b:
ca:d8:bd:ef:d0:db:ac:6a:e2:71:87:c4:f3:63:5e:90:87:bb:
d8:05:b3:f5:5f:52:e5:2d:86:2b:dd:93:86:43:cc:00:8e:dd:
b7:dd:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:42 2025 by rpki-client