Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: rNGRcj9Fo8wkchaPpwWUJZlqQQvAjCpgreGLMgwNX78=
Subject key identifier: BD:79:44:8F:2F:C9:2B:03:4C:12:00:A0:F4:DF:F2:C9:10:93:9C:04
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 0194BD85AFD6B3B82CF8E96FB7989958974B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 131C
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: TMBoMpvT9w9DUaNi1zcbp+lP8+K3huUEG+RtTFIVlOg=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:d6:b3:b8:2c:f8:e9:6f:b7:98:99:58:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=bd79448f2fc92b034c1200a0f4dff2c910939c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:b8:7c:21:e3:3f:05:f0:84:31:f2:0e:f8:
28:02:a3:00:cc:56:59:dd:c0:52:9f:31:5e:e5:3e:
fc:3a:49:79:c7:28:59:98:75:3d:28:fa:22:31:23:
9d:b9:b1:59:8d:ca:46:c4:3c:dc:51:fc:26:7f:d1:
89:f3:6b:b5:8f:bf:4c:e6:5c:65:dd:7b:9e:97:94:
3c:98:76:79:c3:ce:f7:7f:1d:8c:25:81:33:d2:64:
03:5a:e5:2c:67:1b:44:00:d2:ed:60:ff:64:71:14:
19:ab:16:43:68:a1:d0:20:ed:2e:ee:df:bc:63:af:
5d:da:83:24:b2:47:38:f9:d0:56:c9:e7:ac:2e:bf:
24:b0:f4:95:42:1f:ff:4a:f2:e9:6d:95:98:cd:f5:
13:08:1d:f4:99:ed:56:09:01:bf:f6:b5:40:3e:ca:
11:46:9e:bc:a5:bf:b6:9a:4a:43:17:10:59:4b:62:
8b:e1:4d:00:0f:3e:ab:6f:a7:69:74:5b:28:23:40:
fb:c2:c0:5b:b1:6b:66:11:6c:2e:ca:b3:c2:a0:95:
18:6a:86:2c:18:c5:24:6e:3d:fc:b1:cf:3a:f9:ee:
ff:b9:19:11:c6:0f:02:0a:86:59:eb:c7:08:a5:95:
a6:27:c6:a7:85:6e:d1:c0:89:36:23:02:bb:92:63:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:44:8F:2F:C9:2B:03:4C:12:00:A0:F4:DF:F2:C9:10:93:9C:04
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:91:91:c1:74:83:72:65:91:2c:39:6c:99:a8:79:29:52:a3:
10:de:c9:8f:c2:a3:c2:7a:3e:ec:e7:55:d9:2c:69:7c:55:ca:
e5:bf:c5:b3:00:28:f5:e7:88:c9:a6:c3:4b:d1:45:13:2a:a9:
89:36:19:b6:03:ef:0c:74:3f:4f:34:36:12:e8:b6:f1:db:19:
32:b5:9a:72:6f:4e:f6:d1:97:57:f1:e4:40:99:b2:ac:e0:ba:
44:ea:ef:aa:fb:23:38:f0:07:a8:11:e2:8a:3c:b4:ea:62:1d:
53:5b:a1:43:bb:0a:b8:21:00:f4:06:e1:25:9d:a6:52:f3:13:
18:34:f1:da:96:f6:94:52:c9:f0:d5:09:30:3d:32:c6:92:d3:
de:06:31:70:f5:f4:d9:0d:ae:d5:42:1e:b9:51:c4:f4:df:6b:
cd:77:58:3a:05:48:e9:a0:e9:95:c2:ab:32:21:7a:2b:2f:18:
93:95:99:c9:ed:51:51:80:4e:aa:33:31:df:b5:d3:f1:f0:0b:
ca:a7:50:21:89:a0:6f:6b:91:af:b3:b5:e6:bf:4b:d7:3e:76:
5b:fd:a4:18:e2:55:16:d7:93:21:bf:4f:31:38:e9:fd:57:e4:
20:b3:67:10:49:40:fa:8d:fc:65:0f:61:dd:8e:97:57:1a:6f:
52:b6:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client