Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: AOnz4bhW3CG6j7lrywxLCTreuSYqVhtkJzs16ebugnM=
Subject key identifier: 46:3A:B3:40:2E:77:40:F3:E5:31:60:90:49:A3:EB:D4:6A:5B:E0:D2
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 0194BCA9EC1A5D9734ABF1EC6AF98D8D0933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: TsWCry2MohUgQnhS/3R7EwijTFosYWHh/U/QHzeK43k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ec:1a:5d:97:34:ab:f1:ec:6a:f9:8d:8d:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=463ab3402e7740f3e531609049a3ebd46a5be0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:4d:71:e0:c6:b4:5d:1d:b7:15:38:ae:4f:
95:93:a9:de:22:f2:ef:32:5d:8d:58:d6:f0:12:02:
86:87:0f:00:00:2d:d6:80:be:2f:cc:50:fd:aa:25:
72:30:4b:04:10:23:07:bf:bf:66:85:f5:85:8e:89:
bb:c3:45:c6:6f:7b:04:b7:41:82:34:a7:7f:08:ed:
34:3d:9b:d3:1a:60:6f:35:d1:d6:01:4d:42:b7:66:
67:65:00:4d:86:e5:ca:81:58:db:ed:a3:84:9c:12:
41:6c:b0:cb:d3:b4:30:3e:f0:5c:f3:e8:8f:02:46:
ce:30:95:90:ca:c4:eb:d3:25:be:65:3a:81:f5:b1:
2f:f5:8d:7d:10:d1:24:48:1b:02:8c:c6:5c:1f:ae:
74:33:61:8c:99:bd:6d:37:7f:10:3d:2b:f2:60:52:
39:bd:79:26:0c:50:b4:e9:5d:f0:fd:4b:22:31:ec:
6c:b2:cc:25:9b:94:60:75:3c:dd:ef:f8:01:2d:38:
17:39:b7:b3:d9:e6:8f:f7:b0:e9:06:14:60:80:ed:
3a:d7:29:fb:fc:99:23:79:2d:da:e2:9e:53:aa:86:
8f:27:9b:2a:73:1e:08:b1:3f:56:ad:4a:b6:9c:a8:
2c:59:2c:0c:a0:d7:5b:02:cd:7e:fd:1c:5b:82:c0:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3A:B3:40:2E:77:40:F3:E5:31:60:90:49:A3:EB:D4:6A:5B:E0:D2
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5f:98:cc:ff:50:2b:e7:3b:b7:91:d9:9f:f8:a9:d8:55:72:
51:f3:b3:34:a0:6f:06:e7:65:5d:19:93:1e:84:0a:2e:cc:ba:
c1:49:8c:ef:01:c3:ab:17:52:c4:ce:fb:78:9a:12:df:89:b4:
b1:1a:c8:50:29:63:89:a8:38:40:fe:b7:8c:e0:63:42:be:0d:
18:79:99:17:b3:09:01:bd:7a:70:73:c8:5d:7f:0d:bb:b9:93:
86:3a:93:24:77:c4:9c:e4:d7:38:c7:6c:e7:aa:c7:31:1a:c4:
ac:7b:3e:17:1d:d0:02:f2:0e:98:e8:cb:b4:fa:86:ca:69:b7:
e9:57:17:ef:03:97:9d:61:8f:fb:88:d4:17:25:f9:cb:56:77:
7d:11:16:23:81:84:93:61:f6:c8:70:85:23:ad:00:37:8e:e1:
9f:eb:61:2f:e5:98:c9:57:dd:9b:5a:9b:30:3f:0c:09:18:cd:
1c:1e:22:2d:17:b2:7c:6c:07:40:f8:a2:a9:ba:db:e9:e1:f4:
52:03:e4:79:f2:7e:cb:fd:ec:08:08:30:08:e3:2d:a7:e1:5e:
ac:95:fe:31:9c:91:7f:e0:3f:43:97:4c:7e:c5:fa:75:82:bc:
e4:f3:5a:8a:3d:04:1d:91:f7:5c:78:bb:2e:a7:8c:3d:74:7b:
f8:87:59:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:29 2025 by rpki-client