Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: B0VHj7bWnwLPVheFjAH6uSoRqf/RZCuopp/3J6+e67I=
Subject key identifier: 80:31:42:5F:8E:EF:B6:74:01:DF:49:D7:81:9D:3B:1D:D8:55:B0:6F
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 0194BD4E558B01F767C2D246250177073B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 1162
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: qelxHNq5lVyIc4EQQQQ85Q/GWLanOuRVti+zjs1VUl0=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:55:8b:01:f7:67:c2:d2:46:25:01:77:07:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=8031425f8eefb67401df49d7819d3b1dd855b06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:3d:76:d6:28:89:47:49:4b:30:a6:28:54:
f7:44:f6:69:4b:a3:1f:98:bc:78:2e:98:1f:cf:40:
c5:37:75:06:53:bc:f4:c5:13:66:f2:9b:08:0a:51:
d3:97:c4:7d:f3:71:b2:8d:df:b1:86:e1:2c:ef:ec:
e5:31:6e:42:0d:92:87:01:70:42:e9:03:c4:ee:66:
68:73:89:7f:41:12:17:00:8c:04:7e:5b:13:86:29:
29:94:3d:84:57:7b:41:e7:7e:c0:36:34:88:ba:6d:
c3:af:d1:44:89:4e:c6:1d:26:6e:85:53:c3:35:31:
41:f5:6f:de:87:4f:f0:8e:d5:6e:3a:5f:12:38:be:
90:5e:d3:40:37:b6:da:a7:38:25:32:4a:4d:49:05:
11:f5:5e:2a:96:78:49:d6:4c:f7:e0:e5:80:56:b5:
ca:60:d8:2a:6a:b1:05:8a:c9:f5:5f:9c:b0:b2:d0:
f5:18:cd:9f:d0:a4:91:ac:37:a1:a6:f4:f3:a7:56:
3d:d6:30:84:24:fc:80:7e:d3:50:c8:f1:fc:12:53:
f2:74:05:97:8a:ba:32:30:ee:e8:73:93:23:b8:bb:
f3:4f:43:72:c0:b2:93:e8:78:56:58:1e:0e:3e:72:
48:e7:f7:51:d6:ef:c6:9a:0d:5f:bc:22:d1:41:95:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:31:42:5F:8E:EF:B6:74:01:DF:49:D7:81:9D:3B:1D:D8:55:B0:6F
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:9c:eb:9d:50:ef:0c:4b:b1:cd:ef:c8:cf:a3:7f:4f:c4:
fe:31:ac:ca:a8:f3:87:73:6c:a1:8f:29:a0:c7:c9:35:be:a6:
37:a4:af:93:d4:f8:3c:32:9f:9e:aa:91:15:40:73:d8:02:87:
b3:6f:75:9a:ae:16:12:71:bf:3f:f8:ed:b6:47:01:8f:69:95:
a5:1d:61:90:ce:b0:aa:68:73:d1:2b:ca:62:c0:52:2a:83:c6:
0e:f5:b3:ae:71:34:4c:e4:33:61:2f:dd:bc:b1:a3:86:b1:56:
9a:37:b1:df:df:69:56:fe:16:5b:24:91:50:d2:74:32:1e:8f:
3b:b7:a0:7d:0b:5d:28:37:38:f9:75:64:b8:19:82:17:a3:66:
ee:b1:f7:bb:ac:d6:06:0e:7e:27:d9:32:d9:16:14:c6:95:3b:
20:36:b0:48:d7:01:97:5b:ac:60:ef:92:71:9f:fa:a0:84:0e:
35:db:33:53:c4:63:c4:ed:61:3f:bb:4d:8b:22:7f:8b:f4:d2:
07:55:74:e5:6c:6b:f5:8c:23:27:42:2f:d7:d1:55:b7:7d:c9:
a4:d6:20:94:f6:20:0b:80:30:f3:67:7c:bd:d1:87:17:24:fc:
5b:c3:83:0e:f0:d1:63:71:48:94:50:e6:16:b7:7c:2b:78:ec:
00:c5:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:46 2025 by rpki-client