Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: JplUuHD4kLr3CK0BG2BN76W0bYxTTTMIkfhsYF9DeQI=
Subject key identifier: 3D:EA:E3:EF:57:AC:B1:95:6B:C0:16:F9:41:A9:5E:9E:1C:54:79:BC
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 0194BD8587E60B2D03C066ADDFFEB78C6AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: OmijVun+78VVkCTT/fVbzKtineMa9fk1C0hXjnqwRt0=)
2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:e6:0b:2d:03:c0:66:ad:df:fe:b7:8c:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=3deae3ef57acb1956bc016f941a95e9e1c5479bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:f2:5b:70:4e:fc:61:6f:bb:35:42:1b:95:
8c:1f:fc:80:35:76:5f:de:e9:02:4f:e6:e5:f0:d9:
95:7c:4e:3c:ef:34:6f:88:d2:4f:59:fc:e6:b6:8d:
49:f7:e9:11:c6:6a:ac:00:cc:83:3a:c5:a9:cc:a6:
b1:54:70:67:ae:71:79:0c:d3:8e:f2:09:a1:6f:f2:
df:61:0f:5a:ff:73:b0:28:b2:5a:9d:7e:9d:5d:fc:
18:5b:73:f3:4b:0e:ad:5a:25:d6:40:36:d0:12:f8:
92:a3:7b:34:03:ee:ef:ea:30:ec:34:1f:69:a8:68:
af:64:86:b5:7a:20:37:ad:b5:a1:13:bc:1f:c1:a2:
60:16:09:77:f1:2c:82:7d:18:47:47:a6:0b:82:71:
64:bf:b7:bb:b7:0f:91:c7:43:24:7c:7c:62:c8:b6:
94:6a:f3:96:73:a0:07:45:34:8b:81:f2:20:8b:bf:
e4:53:b3:2a:1f:e5:e2:9e:48:67:27:54:d8:62:f0:
9f:ba:ba:12:67:f7:20:b1:88:3b:11:d2:21:29:ef:
e5:ab:12:3d:fa:0c:8a:66:56:22:7b:23:e6:4a:ec:
29:f0:b1:e6:4b:41:45:77:e0:b0:c8:d3:be:98:24:
1a:23:02:b9:b8:a9:8a:23:6e:c3:c2:83:cc:d6:45:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:E3:EF:57:AC:B1:95:6B:C0:16:F9:41:A9:5E:9E:1C:54:79:BC
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:a7:ff:d5:c9:6c:ad:f4:00:40:b5:97:73:fc:ec:41:08:
f9:b1:e0:75:25:af:9d:ac:48:29:de:9e:22:53:91:60:4f:77:
e4:da:02:99:42:8f:95:e9:99:44:54:b6:76:fb:eb:79:01:f8:
2b:be:1d:c7:0a:8a:06:d5:30:f3:f0:80:6b:02:ec:f1:ff:25:
f1:93:37:cf:f6:9a:4f:51:a5:42:9e:6d:a0:0c:3d:6f:2d:78:
76:25:9f:38:52:57:eb:9c:e3:77:2f:16:38:19:b3:11:c7:cb:
65:42:d2:2b:f3:e1:9b:05:1b:0d:dd:8f:b2:b6:e8:e5:89:b8:
d9:df:85:3a:7f:bc:da:ec:90:86:ac:aa:5d:5c:33:98:6e:a4:
2b:dc:23:09:1b:84:e9:e8:34:91:bd:97:97:60:10:03:41:76:
3d:37:f1:6f:e1:4a:5d:0c:e5:4d:78:bd:25:e5:02:13:18:e2:
75:fb:7c:6e:5d:11:a3:0e:73:27:91:f9:05:99:33:fa:67:2a:
5c:61:e5:06:6b:e8:15:49:82:71:b1:51:c1:c4:b5:50:8f:57:
73:0f:57:f4:86:c7:38:ca:40:03:83:f4:84:66:5f:b9:14:26:
9a:4e:b7:a6:2f:d1:33:4b:1f:d7:ef:e5:83:ef:4f:77:5d:96:
95:a7:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:32 2025 by rpki-client