Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: eF1W79ecxHtBEOYx5BKUUT9KKlFeTgHl4C/n94f0OvU=
Subject key identifier: 86:21:4B:DE:D0:4D:8B:AD:7A:46:3A:F6:FD:BF:5C:29:89:25:B8:80
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 0194BCE07A8B2F8E031DA4AF8BA74711DF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 124D
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: c0jD6It9FPRa4664KKkV9vh/2+jXPyMmLbO0qlp98xo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7a:8b:2f:8e:03:1d:a4:af:8b:a7:47:11:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=86214bded04d8bad7a463af6fdbf5c298925b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:f5:40:a6:da:65:f9:9c:da:43:51:e7:a7:
2c:50:90:bc:e1:01:2f:9b:f1:3e:c4:42:88:a6:80:
98:ba:20:64:55:6e:05:e7:9e:6e:12:6e:7e:74:76:
82:5b:28:3c:9d:d8:86:4c:bf:b7:2d:fc:02:a3:80:
1e:f6:3d:05:9b:19:07:a0:d6:2a:63:68:e7:6a:1f:
0d:90:78:08:a0:ea:50:84:cd:1e:21:f9:a6:bb:c1:
26:f6:6b:82:94:01:92:8f:1f:81:c4:8e:65:4d:b4:
76:b4:cf:52:d0:b1:e3:29:87:c0:08:7a:72:14:e4:
45:8e:bb:c5:f6:95:c7:da:5e:b9:aa:c0:ec:76:98:
27:c2:03:97:fd:5b:0f:0c:ea:ab:ab:a3:9f:ad:07:
44:00:dc:e1:67:a4:57:4a:a6:70:30:7c:11:b4:48:
d8:68:df:ab:bc:0b:b9:3e:5d:42:c6:8f:95:4f:a9:
e1:82:96:dd:9f:9b:31:07:20:b8:bd:31:60:a6:5b:
f4:0e:3a:56:c6:9c:66:03:98:cb:e2:8b:c8:33:d9:
a1:44:be:0a:48:b6:ed:d7:39:4d:95:57:85:1f:1a:
06:05:b1:bb:5b:a0:02:18:78:f0:41:15:4b:2d:80:
be:58:e1:8d:e0:d8:32:50:c5:34:ba:dd:70:ba:7e:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:21:4B:DE:D0:4D:8B:AD:7A:46:3A:F6:FD:BF:5C:29:89:25:B8:80
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:78:7a:32:fd:57:4b:ec:a2:b3:7b:d9:44:50:6f:67:0d:6f:
70:db:99:7a:5d:32:2d:2f:2c:e5:bb:4a:57:21:0b:bf:ee:39:
a1:8e:4b:34:71:b9:e0:a7:55:71:3b:4a:a4:a1:50:4b:5c:94:
9d:ae:34:85:d6:dd:a0:67:b1:9c:de:d2:60:8c:7e:9d:f4:96:
7c:70:92:12:fc:48:d5:ba:84:51:2a:2c:38:20:b6:f4:9e:c3:
d0:e9:1c:4e:9e:36:dd:a2:b4:87:02:89:54:f3:c0:68:9d:70:
d9:58:a5:9a:0a:38:30:31:2f:62:9a:65:a1:9a:fe:68:21:8b:
04:c9:77:ef:4d:6d:36:fa:34:35:dc:95:e4:03:14:de:b5:e2:
db:e8:2c:2d:25:fe:8f:02:4c:b0:aa:0b:d6:20:8f:b7:32:7c:
28:af:66:ef:d7:aa:77:70:d0:e4:36:83:50:68:52:2f:1d:c2:
61:c1:c7:50:6c:f3:d8:76:df:ee:e8:9f:7c:60:56:d6:3c:73:
a2:4b:a1:41:4d:32:be:0f:c7:77:97:1b:e2:88:11:cd:a7:60:
1b:b3:fa:fa:ff:78:51:1d:ea:bc:bc:b3:db:cc:30:6c:23:86:
ed:a3:d5:a4:b5:b5:ee:f4:e8:a0:4d:76:bf:f5:f3:b3:84:73:
98:dd:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:11 2025 by rpki-client