Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: TbVAuZxH4I2QlYXzoJUTHq9MbXZFk+27J/4Fwpn5wSM=
Subject key identifier: 4A:7B:96:3F:A5:1C:B0:C3:02:B7:87:C1:C5:26:B6:82:69:C4:C9:50
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 0194BBCDDDBA08C214BAE967E617AA90EE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1169
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: bTAXDGsasH5Nf/saNX5a65TKJE3Wc62SVB7DrxHth0Q=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dd:ba:08:c2:14:ba:e9:67:e6:17:aa:90:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=4a7b963fa51cb0c302b787c1c526b68269c4c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:98:8d:51:e9:d1:a4:f6:44:69:ff:0c:c3:
2f:ff:5b:55:34:19:01:54:20:29:a1:0d:dd:03:51:
2c:79:c6:25:a7:d1:66:fc:6c:29:a2:59:fb:fc:b5:
15:56:d9:3b:ae:52:e3:f7:1b:73:f0:f8:15:ab:24:
e8:5a:8d:ca:76:22:76:47:8d:47:ce:99:f1:96:b8:
72:5a:f6:da:4a:b8:16:15:ab:66:e2:47:d1:cb:31:
b1:1f:bc:9d:3f:cf:06:55:e6:5c:63:93:dd:73:a0:
47:3a:09:e6:13:7b:48:86:2b:e6:87:86:6a:aa:19:
bf:67:f9:18:e7:a7:69:8c:5c:aa:43:1e:63:7e:5f:
97:b5:ec:4a:e7:12:2a:d5:e6:09:9f:18:74:42:9e:
67:13:35:c6:37:56:89:2f:1f:20:ac:ef:a7:54:73:
0b:3a:e7:9f:05:62:5c:49:07:f5:b7:86:bd:e6:b9:
e4:53:04:4c:a7:fe:08:80:1c:8d:5a:3f:bb:56:ef:
1d:b8:88:2b:df:af:7b:2c:f1:28:1a:f3:fb:c7:af:
4f:dc:b3:b3:3c:2d:94:ca:bf:89:a8:6a:59:d0:c1:
c9:15:5d:85:62:34:f1:88:e6:93:86:50:3f:a4:ca:
5d:c0:d4:b4:f0:c4:2e:74:71:c4:cb:2f:4a:07:7a:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:96:3F:A5:1C:B0:C3:02:B7:87:C1:C5:26:B6:82:69:C4:C9:50
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:69:6f:c5:47:7a:98:8a:ef:72:f0:b2:19:74:17:60:93:40:
1c:24:3c:74:cd:19:9a:e7:97:bd:ff:13:17:a9:89:99:94:5a:
f5:99:32:74:4f:fe:be:e0:43:37:ae:1f:9f:38:39:03:23:5e:
7b:58:b1:47:b6:70:b6:44:97:00:3c:0a:61:28:08:4b:76:e8:
fd:0a:99:e0:85:a8:d9:88:9a:a2:d8:88:f8:17:d7:66:c6:a7:
e6:53:96:c1:f9:cd:34:92:80:d0:35:a7:0b:f7:50:31:5e:fd:
3b:04:85:e0:48:59:86:7b:61:d3:24:5f:15:c9:98:7c:2d:5b:
32:75:00:6d:0e:f1:5c:22:aa:20:50:9c:7c:76:f6:76:bd:f0:
7c:85:2a:22:c8:41:1f:28:2e:17:bf:df:9a:b9:99:cb:9d:4d:
2e:b5:3d:f0:c1:1c:62:69:e9:36:62:22:ab:cc:26:d9:75:9e:
c8:f3:a6:8d:bc:e5:79:91:eb:b4:26:cf:d9:47:5a:6a:03:ff:
74:09:db:3e:8f:13:78:91:71:46:37:81:8c:29:17:2d:6f:ae:
09:c8:a9:7c:ef:c4:d1:e6:cb:d7:96:be:04:4d:77:73:cd:fa:
5d:25:90:1f:d7:eb:9b:c0:2c:f9:01:fd:d6:8b:8f:10:2a:ae:
cd:ec:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:47 2025 by rpki-client