Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: TBQKqqae83QjhSwC9yYiMQV36/JOOZYQBTH0VbVcftg=
Subject key identifier: 7E:58:46:93:C6:C2:B0:32:38:BE:B1:C9:CD:85:EB:03:94:C7:C8:BA
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 0194BD4E8992F45BBCE36BF6BF276B525A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 132A
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: HrrMFoL5v2oyTSmtV4zQKNG8s3dqlfEii9fR7DOltPo=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:92:f4:5b:bc:e3:6b:f6:bf:27:6b:52:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=7e584693c6c2b03238beb1c9cd85eb0394c7c8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:f7:88:2f:c3:4c:5c:43:52:ee:c5:9f:8b:
03:2d:d8:9d:28:8e:be:5b:b8:81:23:b2:58:a3:c0:
0b:09:0a:e2:ab:0c:f6:88:c6:fd:1a:40:68:c3:31:
23:0c:ac:7e:25:63:d1:db:9e:5c:60:55:0e:dc:41:
6b:53:73:8b:25:24:33:58:82:9f:a6:d9:9b:52:59:
f9:19:5f:68:66:f3:0e:49:c4:1b:35:7f:cd:c5:a7:
9b:6a:91:e9:2f:0b:d5:05:b5:62:ce:90:4d:59:29:
d6:42:51:67:a4:d3:15:5c:d9:78:61:42:4d:18:e6:
97:48:c5:17:80:e6:be:90:b3:09:f3:6c:da:6a:96:
5a:3b:d9:84:fe:e7:0a:86:00:4b:72:0d:32:0d:e4:
5b:69:1f:a4:2a:fa:bc:5e:c8:14:7f:88:f5:20:a8:
2e:38:67:9b:50:e1:43:90:d4:8a:20:f8:53:b8:c9:
e1:44:e1:49:bd:ea:ee:5f:46:8b:bc:27:6a:6b:ac:
df:a6:60:fb:a1:ca:54:ff:e6:00:87:d4:19:88:1b:
4d:52:c6:29:4a:35:dc:c8:61:37:d7:2d:da:ae:6e:
af:e3:07:9c:7f:09:fc:9a:aa:5f:bd:88:1f:8c:b3:
bd:64:bf:51:ba:a7:5f:7d:15:1a:72:ce:ee:1a:67:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:46:93:C6:C2:B0:32:38:BE:B1:C9:CD:85:EB:03:94:C7:C8:BA
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d8:31:a1:0d:ae:94:5d:1e:65:fb:ea:7c:8b:95:1b:fa:97:
d4:f2:66:72:e3:3e:3f:20:25:31:b8:77:09:1b:f6:c9:d6:c9:
00:f6:02:e4:0b:57:e1:51:ab:34:54:2d:ef:39:30:7b:9e:2a:
f0:5a:73:b3:cd:ba:3d:98:63:f0:d0:84:d0:7d:37:3a:c9:06:
b2:f5:ad:bf:eb:ba:7c:72:67:ca:27:de:fe:cb:35:ea:54:56:
2c:49:8e:3c:5a:cd:fb:34:0f:38:69:2c:1f:0f:11:7a:42:fc:
04:19:70:f0:db:06:a0:3a:89:90:6f:d9:6f:80:04:27:33:c7:
fb:c7:50:f5:ba:6d:ce:a5:64:3a:64:a8:7b:19:a9:11:15:ef:
f2:73:49:58:8a:b5:00:d0:23:e4:db:fe:79:3b:8e:12:a1:77:
57:a6:fe:b3:9a:e8:06:95:cd:72:f8:d5:72:37:a4:00:07:bf:
ec:45:08:d9:40:ab:5e:4d:56:91:3f:d6:7e:6f:2b:d4:52:d8:
63:68:45:4d:fa:c3:e2:83:3a:1e:a0:3a:e1:2c:b4:72:ce:13:
e0:e9:43:af:d3:64:e3:70:7f:0a:14:c2:a0:0c:ad:28:82:32:
54:86:da:7c:23:35:6c:75:31:1e:0c:fc:76:fd:18:45:c9:55:
bd:cc:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:16 2025 by rpki-client