Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
File: dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft (raw, json)
Hash identifier: CAeHeLLeiv78asJdQQB2QGxRaqZQC75UXvbhTAoWPko=
Subject key identifier: 6D:8A:95:5D:25:9E:3C:37:91:C9:56:50:4A:E9:7F:8E:03:37:8D:64
Authority key identifier: 76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
Certificate issuer: /CN=7657211f8a66561b5770ff19b471aef511e83778
Certificate serial: 0194BC04DF3D1AAA63322B842ACC79666225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
Manifest number: 02E4
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl (hash: FjmerYfW1HuUZeLdt/qf7t7Y+ShbYGioHgHcGJckAUU=)
2: zEiKY5IhiMFoe5zY89Uyt22u_qk.roa (hash: N/8LUTyZXsuNqPJSa00eDqkeGKTS4QmoFy1WgcFflgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:3d:1a:aa:63:32:2b:84:2a:cc:79:66:62:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7657211f8a66561b5770ff19b471aef511e83778
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=6d8a955d259e3c3791c956504ae97f8e03378d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:fb:8d:9d:d9:0c:9b:e6:83:3b:83:10:b5:
68:5c:c2:71:62:70:27:d0:7e:97:92:b5:66:39:71:
3b:ac:36:8f:90:45:61:b2:d8:ee:70:45:11:ac:05:
76:7a:7a:f2:ef:1d:81:db:21:11:cc:10:f4:b8:da:
3f:2e:0b:67:c7:54:83:68:45:e2:e7:ed:93:f9:10:
8a:f4:ff:75:af:78:11:cf:e6:bb:b5:f3:b7:5e:18:
f2:b0:a4:46:bc:5a:ef:95:3a:e3:c2:07:06:b6:b2:
fa:80:b4:0c:44:bd:eb:42:62:6d:f8:9f:43:1f:64:
28:71:71:96:00:9e:d8:bd:24:ff:09:7e:e6:08:79:
be:95:b8:b8:2b:79:87:40:c1:92:8f:aa:70:99:2f:
3a:cf:d5:08:ca:f2:7f:61:64:e7:57:cf:6d:f5:44:
16:dc:fa:c1:ca:52:ef:0e:4b:0d:48:82:31:cf:f6:
7b:3f:c6:92:1d:25:1e:a9:fa:77:87:6b:39:13:1f:
72:64:8d:08:90:79:3e:b4:db:d7:e3:63:b6:32:b2:
39:64:50:c3:91:b0:e7:d4:ee:3d:62:bf:33:17:07:
a6:b0:b1:e1:03:fc:98:76:ed:2b:e1:a7:6f:e6:b2:
06:d3:3f:a3:b9:6c:32:f8:18:c6:3c:47:70:1b:ad:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:95:5D:25:9E:3C:37:91:C9:56:50:4A:E9:7F:8E:03:37:8D:64
X509v3 Authority Key Identifier:
keyid:76:57:21:1F:8A:66:56:1B:57:70:FF:19:B4:71:AE:F5:11:E8:37:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlchH4pmVhtXcP8ZtHGu9RHoN3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1e06be-4511-45fc-8949-7431d689a8e8/1/dlchH4pmVhtXcP8ZtHGu9RHoN3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5e:6d:2c:3d:78:82:fe:95:71:db:3a:14:26:5a:eb:b0:3d:
6c:70:38:19:3c:aa:ab:01:f8:56:65:30:e4:2c:9a:93:94:06:
87:08:1c:70:e7:79:36:30:c6:e9:a5:14:5b:22:43:03:53:11:
7d:7d:b4:6b:96:66:e4:46:8f:4b:f6:ea:16:10:26:7c:13:2c:
cf:b8:d2:f4:71:7f:22:57:5a:ac:c7:c3:fe:d9:f5:6c:9c:06:
3c:47:ac:90:9f:9a:be:7a:59:28:05:7d:6d:3f:d5:34:50:75:
67:52:91:53:5c:19:0a:30:67:aa:24:67:85:d9:28:3f:8b:d5:
0d:c6:06:f4:83:19:56:5d:87:3c:7b:42:9b:76:c4:7a:72:f3:
2d:b7:c9:6c:60:8e:c5:c5:98:08:21:15:f0:12:6a:63:ce:27:
1c:79:26:7f:60:52:6f:3e:df:ce:82:52:3a:98:9d:26:4f:d4:
d5:31:98:1e:1d:7d:c6:94:f3:c1:98:d8:35:da:d9:f8:01:21:
ed:3d:bc:d6:c5:bc:84:4c:54:a9:c0:0a:d6:4c:90:48:9b:39:
e0:a0:45:57:54:93:b8:91:c0:32:23:eb:3c:71:a6:70:d2:93:
50:a6:1c:fc:43:69:5c:89:06:3f:31:44:69:f9:97:77:f3:e1:
3e:f8:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:52 2025 by rpki-client