Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: dTHPxFWVleqx5VS5RDGHOTWnLch18q3RTJeJ9W3Gn4k=
Subject key identifier: DD:8A:79:67:B4:AF:83:51:07:3F:42:1F:6C:4B:9A:EE:F4:42:CE:15
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 0194BC3BFA0832319EDD293BBDA361341AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: hsOTwVDmg6RLi1O5JfpW54NlyFzPNfSCLUKoqOEdPZo=)
2: irNcQLmJh11TGBELw5uQP7kOVJE.roa (hash: R7pIQc58X7S0CJk6seUtKX1n/5bjuhfl7ShC4vfuTCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fa:08:32:31:9e:dd:29:3b:bd:a3:61:34:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=dd8a7967b4af8351073f421f6c4b9aeef442ce15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:f2:9f:8b:b8:18:4c:56:3a:08:0d:84:43:
1e:75:75:13:1c:17:36:46:e9:1c:6e:8d:83:7d:3b:
5f:77:e9:2b:c5:32:a4:a6:e4:4c:4a:f7:b7:bd:4f:
ef:b0:1e:17:f3:bd:91:08:75:dd:8b:d7:09:93:c9:
f1:60:24:c5:9e:9c:e8:47:53:42:02:a1:73:2b:43:
29:25:e2:50:5c:56:1f:07:a3:10:53:6d:74:c8:8a:
a7:e8:b9:56:02:24:01:7e:f9:10:b5:2f:fb:2b:a5:
3c:fb:6a:b9:09:4f:ca:bf:b1:5f:a0:b5:3d:f0:1d:
2c:2a:71:92:1e:74:b7:c9:7e:24:a6:7e:2b:6b:4c:
44:e6:84:ba:ae:ee:66:6c:54:6f:bf:a8:2e:03:36:
6f:34:6b:22:61:e3:51:29:75:5a:e0:45:79:b7:53:
33:4b:a4:ce:56:d8:17:b7:e1:73:b8:b7:10:0a:ba:
a6:39:b0:d1:63:2c:34:0f:af:32:81:fb:f5:9c:e4:
6f:40:8d:03:cf:87:f4:c2:a5:c1:6d:04:e2:29:87:
f2:32:08:8f:dd:c4:32:a3:65:6b:20:a9:42:3e:72:
8d:df:34:37:42:44:ea:1a:25:31:32:31:dd:b1:75:
5f:00:7f:7d:c6:5b:a1:21:f7:b9:ce:bb:ad:57:99:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8A:79:67:B4:AF:83:51:07:3F:42:1F:6C:4B:9A:EE:F4:42:CE:15
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:ce:5b:99:35:13:45:08:d5:29:e8:ec:e9:74:3c:56:db:
69:b9:65:65:a9:1f:b6:1b:81:21:be:33:c1:e9:fb:0d:b9:b1:
32:81:12:61:66:a2:41:0d:3e:6a:7d:ff:c5:35:a2:08:65:de:
bc:e5:8a:87:2d:b4:95:b6:83:06:0b:b9:c6:9e:d9:e3:88:ac:
bd:84:ad:05:cc:af:64:20:3c:6d:ea:41:9f:5e:4c:2d:48:9d:
8f:ed:eb:a3:6e:cc:a5:97:9a:af:82:d2:e0:78:bb:ab:2b:5e:
bf:ec:87:13:7e:4f:51:1e:27:99:ca:2b:a9:f8:de:f8:16:12:
45:de:a3:62:0e:64:75:18:6a:42:08:cb:72:d0:7d:91:b4:45:
86:bc:78:d0:a8:3b:a9:68:d4:39:9b:3a:57:63:14:11:b8:8d:
25:e5:02:3f:d3:22:4e:dc:86:8e:fe:44:2e:e6:b5:2a:13:6d:
e9:cf:36:44:20:09:e0:a7:ae:57:a2:02:98:23:94:d2:08:02:
d1:07:7c:c2:e4:cf:7d:4b:b2:b9:88:87:17:44:64:06:c1:c6:
69:27:18:62:88:c9:96:0c:8c:b3:31:5d:cf:34:62:46:bf:62:
d0:e2:02:9f:00:55:90:83:90:fa:61:f8:e8:77:b4:3d:19:27:
25:34:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client