Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: iTEQmRE9eF8z3U/EHweil7TMqPfgcr+f6nG3BSynCQ4=
Subject key identifier: 1C:CA:46:29:51:E5:DB:3F:A3:B1:56:B3:EE:05:3D:AA:1B:E2:6E:BC
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0194BC7310A0DA7E45FD180BE5293929FCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: zGub+djE+qA7S0Qo/Ctk0bsLgaeywgh3W3Br41hfL88=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:a0:da:7e:45:fd:18:0b:e5:29:39:29:fc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=1cca462951e5db3fa3b156b3ee053daa1be26ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:81:1a:c2:c0:a9:6d:88:d9:9d:a0:e5:41:
51:1a:a2:2e:0a:e5:d5:29:e0:f8:f8:25:9d:aa:84:
fb:bd:ba:0d:22:92:7d:47:d2:64:7c:8e:6b:53:34:
a6:40:d9:53:e2:d1:d5:0c:59:92:00:a2:30:f0:63:
f8:4a:9b:5b:5d:7d:f0:cd:1c:46:89:ea:9b:ea:49:
31:00:85:fe:20:ff:ab:83:b9:af:5a:1e:a3:61:11:
d3:a0:50:cc:f0:b5:57:91:1d:d8:55:18:af:6c:05:
50:17:de:6f:7c:f3:09:39:2e:77:76:1b:e6:a3:3f:
eb:c0:4e:d4:20:f5:39:18:1f:70:a2:f1:1e:6c:66:
ea:6a:2c:01:36:b3:52:88:89:7c:4a:2f:fd:e4:37:
d2:62:cd:fe:e7:d0:37:f0:b9:ee:08:83:2b:4c:15:
68:98:ee:61:f9:66:17:34:e1:ee:b6:0d:6b:0c:10:
8e:2c:56:5b:aa:d5:f4:f6:35:66:a8:04:69:a7:f8:
64:99:d1:5f:81:12:3e:da:d0:73:db:57:d4:c8:b8:
23:e9:77:60:b2:e6:63:35:fa:93:ac:55:d8:0e:8c:
a2:b1:a0:66:12:0d:de:fa:0f:00:66:d5:b2:86:35:
03:37:f2:19:3a:a7:8c:12:a7:6f:ce:48:c9:5e:2e:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:46:29:51:E5:DB:3F:A3:B1:56:B3:EE:05:3D:AA:1B:E2:6E:BC
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:47:7b:9c:93:65:2c:87:5a:a3:a2:ab:d5:27:e5:f1:22:
a3:69:f9:a7:a6:1d:a0:83:65:1b:33:a1:7f:b4:03:3a:01:cf:
3f:bf:31:bb:7b:f1:2b:aa:e5:85:67:e6:04:7f:15:c8:ae:24:
46:b0:49:27:b2:aa:8c:a1:f4:cb:95:86:8e:c1:48:d6:d5:2f:
34:c3:6e:19:a5:de:e3:61:cf:3c:f2:92:53:4f:c0:a3:54:bb:
51:74:83:06:d6:9b:fd:7c:0d:72:38:4f:b2:6e:67:e7:84:cb:
af:26:f3:25:c0:b7:60:e8:0c:41:12:b2:c9:6c:ec:a2:5b:ab:
e8:46:c9:12:a4:f2:37:93:52:50:da:ea:e1:12:bc:a7:5f:6d:
98:84:75:72:f3:50:77:69:27:e3:be:7c:12:f4:ac:b3:4c:86:
33:40:b0:30:e6:b3:3f:1b:24:6a:a8:ae:78:99:67:cd:f4:e1:
5c:04:16:c5:f4:74:4c:ab:eb:8c:d8:c0:da:c1:f9:c2:59:36:
52:5f:42:db:8a:1f:af:b7:3b:5b:01:da:b5:61:cb:2e:1c:ce:
96:b7:49:ea:fd:3c:ac:cc:3a:e5:00:b6:17:39:95:63:4a:0a:
58:9c:b1:68:ef:e5:2e:af:f1:16:34:d8:cb:84:e0:10:86:2f:
1b:02:bb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:15 2025 by rpki-client