Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: DUzIFXPE2lwOxzmYuBA6FPl7GjIO8baQ0ABhl6XNe2g=
Subject key identifier: 7C:A1:73:A4:54:94:7E:5C:27:D0:26:76:C1:86:82:57:BF:45:E7:AD
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 0194BBCE90078614764B51C3F949BDA5D0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0985
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: rWr9ij3MHV2zv6lyAQXXRUWwn6gpPAoFuEybZ5/G2y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:07:86:14:76:4b:51:c3:f9:49:bd:a5:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=7ca173a454947e5c27d02676c1868257bf45e7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:e3:ee:df:16:a0:2e:7b:96:59:72:56:b8:
02:b1:b4:3b:0b:f0:40:14:fe:7d:2e:2e:3c:80:54:
3d:76:9a:52:df:7b:94:9f:49:e2:dc:03:98:e5:8a:
4a:67:70:37:12:54:5b:1d:0d:cc:0c:c2:59:2e:eb:
12:57:06:80:ab:5a:c8:ff:6e:27:3e:e3:1f:13:bf:
52:ae:2a:1c:21:86:c3:4a:39:16:7b:b8:5e:53:59:
bc:ce:e6:ae:fb:5c:91:a7:97:f5:e7:0a:23:0a:e2:
f6:fd:2d:67:2e:65:77:54:e4:18:6a:6a:5b:ac:7e:
06:62:c5:a7:24:a9:29:d1:af:01:73:c1:b9:89:49:
da:b4:6d:f3:53:06:e1:87:f6:c4:d3:d6:ce:b9:6b:
e1:da:9f:cd:b2:f0:6c:49:15:c5:45:ad:f3:77:35:
35:62:fa:89:84:e1:82:fe:39:fb:2a:ca:e6:ae:c7:
25:8e:0f:ba:dc:b3:b5:88:61:58:5c:e8:0b:33:a1:
ba:4c:65:02:43:88:d9:ec:b6:d1:54:a9:65:8d:b9:
26:47:c7:ef:e8:01:8c:eb:e4:12:ac:85:7a:38:08:
7a:9a:61:1c:83:2e:67:00:ed:73:93:eb:45:a8:97:
d2:8d:55:93:14:e7:a5:0a:ff:7f:3e:06:fd:02:26:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:73:A4:54:94:7E:5C:27:D0:26:76:C1:86:82:57:BF:45:E7:AD
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:a4:b4:98:00:6f:4c:af:4a:b1:46:7e:8a:76:67:d3:70:
00:8f:2e:76:48:38:bd:ed:23:c7:c3:c3:9f:df:fe:a4:9b:7d:
3d:7c:f1:30:c3:75:f7:78:74:85:57:75:7f:4e:8e:f2:f8:b5:
c9:30:89:e3:b5:3e:0d:8d:86:db:3a:c0:f8:2a:60:c0:12:0d:
41:dc:30:e3:de:30:a4:55:7a:84:54:b5:bb:81:2b:0e:da:13:
f5:33:97:29:3c:17:11:2e:28:b7:11:80:ac:42:20:d1:9e:50:
2b:93:51:0c:ef:b0:27:a5:ef:d2:b4:d6:24:eb:72:06:3c:71:
59:61:67:7d:ad:92:43:01:e4:f6:f5:7d:fd:82:8c:69:1c:a8:
be:0b:2d:f4:d7:3d:ea:50:ec:bf:88:cc:0c:32:43:dc:e6:41:
81:b1:96:a0:f2:9a:fd:00:98:bd:15:bc:d2:cd:63:71:d2:19:
fb:15:88:be:7c:27:1f:57:61:c0:b5:13:a2:1e:36:40:de:d2:
dc:df:83:9c:97:e6:c3:a9:e3:91:0b:cc:62:ae:64:58:18:72:
93:96:1b:c1:1c:f9:3d:15:b0:07:f0:b1:f2:75:44:01:f6:8f:
00:45:55:6c:5b:22:b5:2b:48:3b:80:6d:8c:a8:cc:f4:84:4e:
ed:e1:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:57 2025 by rpki-client