Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: iMC/wCGjQjeWNoQSHbw17xQwyDBNS07+zIfMclhxG3g=
Subject key identifier: 6F:18:DF:CA:25:A8:67:F9:1F:D0:84:92:CF:29:B1:E9:F1:0C:CD:25
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 0194BD176D9C743B99ABB913D71DD78F90FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 0636
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: hnGz2HUCv8yZ0C5tF30Q3rrx04PIeb+wn2qYPg9L7rI=)
2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:9c:74:3b:99:ab:b9:13:d7:1d:d7:8f:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=6f18dfca25a867f91fd08492cf29b1e9f10ccd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:9f:a0:0f:e3:85:77:ab:a8:a5:cd:85:83:
44:7f:7f:c6:17:72:f8:eb:f4:46:11:9d:a1:bd:b7:
84:3f:65:85:d8:12:d7:1b:7c:56:d4:66:93:69:46:
59:e8:0f:51:b7:48:96:b2:c0:16:9a:12:de:c2:5e:
04:c2:29:6d:8a:f1:84:c7:b4:0d:d9:1c:d7:22:f5:
19:ff:68:44:58:3c:90:5e:4f:35:6d:07:49:83:b5:
b6:3c:6d:dc:02:8d:78:60:05:a8:08:a9:28:87:9c:
c7:6e:c6:1b:b3:57:73:e3:c5:6d:15:b0:5d:d7:cf:
ad:c6:50:bd:8a:e8:c3:8b:1f:7b:55:41:83:e1:d0:
72:a0:16:e2:33:2c:d7:79:90:0a:f7:41:56:5d:f5:
c9:62:b9:3c:74:7c:ac:a5:12:61:b7:90:a3:da:37:
cd:5d:2e:8b:0b:45:f5:2b:d7:44:91:05:10:3a:fc:
e8:8e:b6:59:8f:b8:0c:f8:2b:e9:73:a5:81:ab:ac:
75:52:58:f2:4e:06:21:41:c9:c8:18:36:f1:bb:0d:
07:11:eb:da:5a:5b:8f:ac:d0:30:a7:11:41:43:4b:
68:55:96:0d:8d:60:de:65:f2:ff:5c:60:2a:e1:40:
e8:b0:a6:19:c5:93:a6:e2:d3:a8:65:ea:fd:0e:6f:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:18:DF:CA:25:A8:67:F9:1F:D0:84:92:CF:29:B1:E9:F1:0C:CD:25
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:da:1e:04:80:d9:37:52:d6:59:e1:ca:e1:4c:39:e0:17:0f:
ce:e0:cf:bb:7c:89:9c:f9:70:67:f1:db:94:b8:8f:63:ff:27:
e2:95:c4:f1:ff:00:59:c3:10:21:b5:c3:75:32:cc:65:41:7b:
93:ab:60:17:b1:9d:cb:55:d7:95:6d:ab:1d:14:e3:35:92:d5:
98:ed:56:17:08:98:87:88:9e:c5:a5:28:f4:86:cf:ce:ad:9f:
fc:c8:23:f5:b9:eb:cb:02:8c:ce:13:3c:7e:98:ac:68:55:c4:
df:16:ed:75:81:9f:3f:3e:3d:96:d4:6d:81:a1:29:8b:e0:62:
bc:21:8e:f6:90:be:dd:eb:9e:0d:ed:f7:b9:96:81:3d:01:e9:
c2:a3:17:26:bf:60:a2:c5:bd:27:54:91:45:10:8d:6a:a5:7b:
2c:61:88:fa:35:fd:50:a9:20:6c:38:73:62:93:75:8c:ee:aa:
06:4c:0e:ed:25:95:9a:2e:2d:44:75:4c:fc:10:ba:02:27:81:
e1:eb:c5:f8:9e:e0:67:95:7d:0b:2a:b1:fe:1d:29:04:fd:24:
30:c6:d7:95:80:42:f5:78:77:0a:21:50:a5:69:cc:40:20:31:
49:63:75:a4:e9:94:34:84:90:74:79:e3:78:e3:d8:2d:58:db:
57:99:96:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:19 2025 by rpki-client