Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: Lg/fu2v0TP3HOFpw/gAHr6Kwy+hHFG8q79Auw3OVzqA=
Subject key identifier: 90:E6:1E:17:7B:17:14:DF:E5:36:70:35:98:10:E2:3C:82:8A:80:73
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 0194BD4E7764AD2EE80775B459ECE42A4849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: deH0oOS+/aeQ9kNvqjneZCM20F2qMqy7kVwbMGuCgKM=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:64:ad:2e:e8:07:75:b4:59:ec:e4:2a:48:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=90e61e177b1714dfe53670359810e23c828a8073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:4a:e0:ce:06:82:88:37:f0:65:1a:6f:2c:
4c:98:17:22:cd:d7:1a:35:68:28:6f:a1:e0:2d:7d:
65:3e:f3:3e:46:9c:ba:b4:ea:e4:55:97:24:0e:af:
35:cc:1d:17:24:22:0a:74:78:44:79:41:c6:73:5e:
36:e7:10:d6:7e:46:81:42:98:bc:a7:a7:17:0a:f7:
59:fa:a1:b6:24:18:3a:02:69:a1:7d:bd:1d:74:8e:
3a:a0:ac:9f:ff:5c:cb:64:51:ed:fe:fc:9a:71:48:
69:fc:2c:e8:f2:1c:87:df:e1:10:04:d6:27:97:84:
17:e3:36:83:19:11:ee:8a:82:57:f0:b7:e4:00:fd:
65:e8:f3:54:7d:95:f9:46:51:00:bb:4c:52:72:63:
59:85:b9:bb:ac:c4:5f:43:6d:38:a1:78:5b:0d:11:
4c:1c:c0:97:6e:8d:a8:0a:f9:4c:ec:f1:6b:a7:de:
67:b0:83:c3:84:3e:f6:c2:a7:05:43:ba:4b:86:ab:
82:49:b7:32:90:60:d7:1d:86:50:db:1a:f9:32:40:
d8:02:27:33:9b:4d:cd:ad:38:7d:e9:8a:59:1d:1e:
66:13:58:e1:ee:26:1b:37:22:98:20:86:e5:13:b2:
f5:46:7b:83:18:a1:e0:19:b0:8f:1d:96:04:b1:7b:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:1E:17:7B:17:14:DF:E5:36:70:35:98:10:E2:3C:82:8A:80:73
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:42:22:ca:c3:f4:98:84:3d:2c:39:9e:20:e0:71:dc:f1:
6e:d3:d9:9e:2b:cf:1d:46:79:a9:3a:82:ae:06:d5:18:fc:fb:
c7:d3:09:c1:d0:2f:f4:e3:40:bd:df:18:a6:52:01:ed:5d:18:
13:d4:d0:a9:aa:22:f3:1e:39:40:88:22:3f:9c:23:25:76:ad:
46:67:2d:90:b3:60:10:20:36:48:24:68:ec:9b:65:55:78:3a:
e7:c2:2f:9b:b8:da:69:b9:23:70:c7:4e:e9:d6:3a:18:9c:46:
ea:3d:e8:ab:06:90:d2:21:ca:08:97:1e:19:6c:c0:1c:21:05:
b4:37:71:ec:b3:d2:47:03:a3:b9:af:30:bb:8c:c2:e0:92:92:
be:59:0c:8b:38:df:51:c9:80:ae:dd:b7:72:8b:39:e6:0f:b9:
4c:3b:92:d2:e9:8b:c1:92:84:8b:f8:28:b6:f2:6c:5c:ed:5f:
92:60:e5:bc:33:3a:65:2d:1b:c3:99:a5:da:72:bc:9d:7d:05:
c0:2e:f8:d8:fa:f1:2b:49:d1:ab:e9:94:37:90:90:8c:18:e4:
58:e8:11:d9:b3:0c:d0:ff:b9:ec:29:46:d4:99:3c:47:c5:87:
f7:45:e4:f0:cb:73:c5:2d:77:92:19:be:bf:f7:75:fd:67:e5:
36:fb:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:52:00 2025 by rpki-client