Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File: 2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier: UPLagwmPbQM7i+IsEJhlAmogaUEjSCZ/cfF8mcmehHA=
Subject key identifier: D4:6D:0C:75:D9:47:96:4E:5E:7F:F6:19:09:B6:60:2B:7E:A8:46:F5
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial: 0194BC3BBB98CA82D51D24D7CA87D4F192DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number: 03C0
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: MjcDvPjdkFM/YIHYTQdws/eXmGAxt344mL7GF0cyDFQ=)
2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bb:98:ca:82:d5:1d:24:d7:ca:87:d4:f1:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=d46d0c75d947964e5e7ff61909b6602b7ea846f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:b4:05:07:e3:23:93:91:62:56:2a:52:f4:
23:c9:f4:d9:ce:0c:5c:3c:53:75:9a:b3:63:5f:0e:
7b:32:75:53:e8:b7:dc:c3:3b:7a:c1:d8:81:f9:fb:
bf:57:a7:02:b0:77:a6:bc:72:f8:c2:b9:6c:7b:d5:
a1:93:fc:c4:b3:fd:e0:4c:50:24:f6:26:0f:cb:ab:
49:6a:2e:f5:0f:e2:11:b8:21:0d:68:3d:a6:8d:5a:
9d:ff:19:66:64:5f:2b:85:70:2a:69:d5:6d:83:c2:
8b:48:8a:ef:f5:07:0d:bf:51:0b:a9:9b:1d:63:7c:
88:9d:84:8d:a2:6b:f0:6a:53:29:9d:5f:77:df:b0:
13:9d:46:19:85:fc:d0:59:67:89:a7:94:af:8d:8c:
8d:3c:65:0d:36:28:5b:95:66:4a:7c:88:e6:9f:88:
d0:97:0e:9e:06:a1:4a:7f:c0:3f:1c:32:bd:60:9f:
17:85:ad:4c:66:8f:b6:88:13:e5:70:64:a2:1c:d6:
be:cf:3f:60:1b:3b:14:b4:1e:8d:ef:67:d6:16:4f:
f8:c8:6f:e5:43:d5:65:b4:dc:69:5d:c1:9a:f6:d4:
13:57:44:56:aa:0a:70:99:8e:95:bd:bf:d6:c7:20:
44:7f:9d:ae:43:5a:5c:db:82:54:4c:9d:cd:e9:64:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:0C:75:D9:47:96:4E:5E:7F:F6:19:09:B6:60:2B:7E:A8:46:F5
X509v3 Authority Key Identifier:
keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:d2:32:14:39:df:f5:a2:0d:6e:6f:ca:c3:44:92:0a:fe:
fb:4e:31:d3:ff:82:f7:f6:f4:5f:96:ce:08:41:53:c6:f9:ea:
c4:27:b2:7a:5c:f7:ac:89:5f:1a:c9:9d:02:da:42:d6:52:3a:
76:01:55:a1:12:5b:2e:10:d7:cd:d2:a1:49:8f:16:6c:ed:65:
80:d3:7b:6f:d2:69:e3:be:be:72:04:c9:ae:77:17:0e:63:e8:
1d:65:e6:c5:d1:ca:a5:04:59:ec:c9:c8:ce:59:76:3e:ee:57:
e2:b3:c6:e1:ce:eb:0d:47:ea:1a:90:08:d2:d6:13:d7:9d:a7:
3f:17:ff:68:4e:61:2a:7c:e5:42:16:f6:e9:a8:27:e7:db:b9:
e3:35:03:49:92:a0:bd:c4:af:64:5d:7c:a8:82:77:82:aa:4b:
41:c1:10:e6:bd:ac:83:d4:f9:64:da:3d:dd:e7:8d:f7:f1:99:
f9:50:2a:12:cb:6f:fc:74:27:46:ef:8e:7c:59:6c:8d:89:8f:
e5:0b:02:be:d5:e3:ac:4b:85:9d:e8:3c:42:62:06:89:2a:8a:
a3:39:17:da:bf:36:8d:62:e8:db:bc:f8:4b:ff:b0:64:4f:0e:
a7:f5:8c:85:40:f5:48:12:35:09:bd:6c:01:12:de:d6:d0:d7:
6e:91:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:56 2025 by rpki-client