Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: 1qawc3q4jJBZLz2FYGnY0J5BJcaK2XS7tsI3mtcLRQ8=
Subject key identifier: ED:6F:EE:73:23:BE:5B:63:83:E8:17:47:A9:8E:80:9F:09:34:C5:61
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0194BD4E6E4CE2C44C5172FFBC8CA63D2C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0873
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: DWUjzTTvFWKI6_KZxYcJUZ-6dbs.roa (hash: p+mIlB1T2bs+wFLe4PrmziLDMKor0sVWbkBm3gWKFRI=)
2: Io1tznSh-GOgc8SrB8aKsJmTYdU.roa (hash: CmiLKKEV0OJ4fWhZXavfx+jbJs8fV6BUsSVAayR8svE=)
3: LLU_h_MCx_PI6iuzjG5n-X7Mntk.roa (hash: co72FMpEqNr608uwvHI73L404xOIPq+UDmFSQ66G/4s=)
4: NeU3JsEorougp-RCpz9NhU4MQGI.roa (hash: eGwzJAtvAeq+Sc3CkDtQSthziroy4FpeeTSyrUZb8FE=)
5: TzjezWebHSz6fdfD6rX_WZumF2s.roa (hash: t5wR4CioofE98lmboG27Ls+8ApJWA+Wv0wKWlwa+C9c=)
6: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=)
7: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=)
8: aP5HMXGzlFZVhafcJhzokVMN3Wc.roa (hash: fsN0gtFv4t3ZcCWTsQsZyN0/f9yTHU0l7DG/tE012i8=)
9: d36kyNbN24ym68fKEusesMWNdB8.roa (hash: 4gSej8V31X+CtNOzp6ONLx41Eof9eDCO7tOWp+L9w8M=)
10: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: 1Wl41WJKeVvDR2er2WUoWT+Z6XsC8VbLGDQfRiAtgNs=)
11: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=)
12: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6e:4c:e2:c4:4c:51:72:ff:bc:8c:a6:3d:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=ed6fee7323be5b6383e81747a98e809f0934c561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:20:13:f0:a2:b6:d5:d2:26:2f:78:d8:3c:
78:bc:93:6b:9d:15:a6:66:d6:fd:d9:4e:dd:87:95:
95:8f:91:65:97:de:6c:53:6d:aa:85:b9:96:0c:3a:
1f:9a:81:a7:0c:1b:e5:56:74:ef:cc:d5:91:f7:c3:
ad:b5:d6:40:95:32:7e:ad:04:16:fc:82:c7:2a:4b:
a1:1f:1f:b8:a7:b1:fd:78:2b:f5:55:f7:32:8b:37:
9b:62:5c:cc:0b:1e:9e:78:bb:4b:58:bf:30:c4:d9:
62:57:42:42:34:db:fe:8a:af:a3:ce:93:a0:0d:f0:
8e:90:53:45:52:85:04:be:27:4b:52:f5:e3:09:4e:
0b:34:32:2e:04:79:70:0a:41:c9:9f:3f:a1:7f:ec:
7a:95:97:c0:f6:98:70:95:f0:36:7e:26:fc:01:d4:
24:67:62:0b:a0:7c:7b:10:e6:ca:99:b4:f8:d9:3e:
45:e1:b5:76:0c:a8:7a:70:06:a8:4f:d0:6f:69:47:
b6:a9:f1:3a:b7:e7:40:64:2e:31:99:ce:c5:de:44:
25:65:5e:b9:83:fe:6e:54:be:65:f6:1e:f2:1d:d0:
b0:52:ee:17:36:d1:a1:e0:7b:83:f4:d8:b9:52:29:
40:46:8f:ff:d6:7b:5a:e4:ff:23:d4:f5:c8:34:b3:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:EE:73:23:BE:5B:63:83:E8:17:47:A9:8E:80:9F:09:34:C5:61
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:04:2c:5d:6e:98:eb:71:4a:4c:d1:08:40:2b:53:f3:5a:b4:
70:14:d1:6f:21:1a:ee:64:a1:e6:1b:4f:45:a1:69:1c:59:33:
12:ef:e3:01:c3:17:8e:1e:a9:86:2a:85:42:6d:59:e6:3e:ae:
b1:57:67:5b:da:51:95:0d:42:72:ee:f5:28:fc:13:06:78:9a:
dd:09:cc:f1:c5:6c:8c:0d:43:1e:e7:e7:97:06:4e:82:6e:0a:
2a:b3:1a:85:ce:41:27:4c:16:57:88:a7:ed:04:21:d0:2f:f4:
f4:de:dd:c2:3b:dc:2d:32:60:bc:83:ba:a0:5c:90:e4:32:b1:
fb:63:66:2b:37:6e:2f:3e:c1:f1:32:9b:48:2d:68:b1:ef:8e:
d6:90:b0:a3:69:d0:69:7d:b0:fd:17:64:32:a1:c3:ec:93:2a:
bb:1b:09:65:a7:77:aa:f0:29:d0:7d:81:42:26:d2:7e:c8:79:
8a:f1:04:84:82:6b:94:da:81:78:06:16:3b:1f:2c:20:b1:b4:
b9:27:ac:24:64:0c:ed:d3:43:0a:35:00:a4:2a:18:50:7b:85:
e7:e0:3c:c1:24:ad:f1:4f:5f:35:1e:bc:17:aa:53:b8:d6:ae:
b8:ee:8a:a6:2c:b1:f8:55:46:f8:c1:ca:bf:db:86:a2:b5:8c:
86:42:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:26 2025 by rpki-client