Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: IKNHUiMEd+onnZC92ZabXOFABBtM/uXvg1zH+Qv18DA=
Subject key identifier: C4:0C:D3:4E:E5:76:C0:A6:63:AA:87:D2:C3:A2:D1:10:76:4E:A0:4E
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 0194BD4E99A4DCD419C9A9B3F1E32D308A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 0D3A
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: PBeiTxVVl13KulRPara1RXYVicA.roa (hash: RXsTBTBPcZfgBdF/8hAfnipircCVtF7KKV+ZAN7eFr0=)
2: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: SpWyCWPEhYX/BiD/3exJMmYvZKM7iHe4IVUtYshLZuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:99:a4:dc:d4:19:c9:a9:b3:f1:e3:2d:30:8a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=c40cd34ee576c0a663aa87d2c3a2d110764ea04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:0f:01:f7:dd:7b:f1:9e:ff:4b:b1:c8:50:
b3:9a:06:6d:24:e3:5a:b4:e1:bc:db:66:79:52:6a:
bf:ba:bf:28:ae:93:76:05:15:61:fe:7e:2c:c8:d6:
a9:26:0a:e4:dc:48:76:31:4a:e7:fc:38:29:7a:cd:
13:f3:7f:44:77:c4:a9:b8:7a:0e:d9:5e:b4:eb:7c:
ed:66:3b:8c:62:73:ab:00:a8:23:96:75:6b:f4:10:
d0:9b:d9:28:b9:4b:8e:ba:5b:4e:07:27:f0:c7:33:
f3:3b:cf:c4:07:b1:37:ff:0d:f0:c0:56:ad:f9:4c:
38:86:49:53:3e:77:88:3b:ab:a1:f2:fe:3a:da:4e:
8c:f8:16:89:f3:dd:ee:d6:10:14:b4:ce:e2:f5:ce:
09:8b:6b:74:a5:fa:41:c0:9d:12:5d:5f:a6:83:d3:
59:a9:68:80:1a:c2:2b:36:7c:73:75:f3:7a:b6:d3:
3e:ad:4a:79:68:a7:80:05:2f:06:83:d4:d5:74:e9:
4f:95:7b:1b:cd:bd:47:35:a1:77:e1:44:b7:fb:32:
38:1c:8a:4d:08:9c:2c:69:46:17:70:92:cf:61:d0:
37:d9:7e:57:b4:5a:ec:d6:98:cb:45:37:6c:73:9f:
86:0c:ff:f8:26:c3:11:d6:07:6b:ab:b9:70:f1:9a:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:D3:4E:E5:76:C0:A6:63:AA:87:D2:C3:A2:D1:10:76:4E:A0:4E
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:eb:51:31:7d:f9:05:af:fe:58:41:60:16:12:73:f6:e4:0f:
55:22:d0:2a:b7:ed:82:07:d5:3b:b5:71:f4:33:6b:a9:d2:db:
b2:65:a8:60:04:cd:76:8c:a0:d6:6c:7a:36:6b:2d:4d:70:8c:
f2:e7:fa:61:f6:70:d9:9a:49:8d:c3:d8:a8:61:5b:0e:ae:c3:
d9:8b:75:31:1f:6e:40:75:ca:7b:d1:9f:04:72:c8:8b:65:4f:
d7:f6:b8:17:86:28:06:99:dc:bb:17:0e:f9:68:2e:88:cd:5b:
f4:b8:a8:57:1a:f3:bf:cf:aa:8a:0e:6b:58:61:87:71:b5:92:
11:2f:65:56:75:56:f2:f0:7f:5c:ad:38:79:64:3d:cf:77:7e:
95:88:0e:d3:8c:ec:e4:41:f9:d4:cc:03:e1:ac:78:82:94:50:
c6:87:f3:ca:f8:6f:3f:04:35:4c:42:eb:15:e9:fb:9e:54:78:
c3:49:95:4b:af:63:46:9b:21:d8:ab:e4:6f:09:c2:5c:1a:f9:
85:88:42:18:ac:78:8e:47:18:bb:a9:11:22:4d:2b:17:de:53:
d8:ad:75:76:03:c4:b5:f6:eb:27:60:2f:50:82:e8:57:1e:9b:
ed:68:41:81:85:a0:6c:f3:51:66:af:24:bd:2b:f4:73:1b:2d:
66:a1:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:17 2025 by rpki-client