Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: haKNpeqFrYcaWAOwB4EnU7kMhdAaRcdjlw3Wx582EvM=
Subject key identifier: DA:CD:AB:B6:F9:1C:0D:8B:06:3E:46:F4:B9:B7:A7:62:7E:05:41:01
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0194BD17E35CDDCFE3DD68EF04717DAEEE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: SKtth0fz6aoQgEBDnjZ2+twiGVcEIaOXS3CKJ1OhWTc=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:5c:dd:cf:e3:dd:68:ef:04:71:7d:ae:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=dacdabb6f91c0d8b063e46f4b9b7a7627e054101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:db:32:f7:37:33:93:cf:e1:9d:bb:6c:9d:
43:6e:a2:59:b6:88:5d:5d:8c:92:c0:ee:58:93:8c:
72:0d:da:f1:3b:ed:48:f6:b1:6d:44:af:3b:3c:27:
16:bc:39:1e:1d:8c:b0:67:f8:4d:01:67:5d:c9:37:
e7:fd:5e:0b:6d:2e:7a:5a:5b:3c:ef:12:f0:cb:d9:
25:10:e6:91:c3:be:02:31:20:53:bc:d4:18:5c:36:
dc:30:8c:8d:db:b4:72:a1:97:6a:02:f8:4a:bc:aa:
5c:1c:c0:40:be:18:7b:ba:6f:c6:94:17:15:a1:32:
ef:20:c6:20:1e:7a:95:da:d0:80:5d:1e:d9:79:ba:
d8:f3:6e:0f:84:c9:1f:1e:35:2d:f6:fd:d9:8f:e1:
76:f2:9d:7d:54:ea:60:7b:96:67:dc:73:e1:0e:eb:
25:64:12:08:e0:a6:05:61:cc:fc:cf:93:6d:b5:ab:
bf:00:ff:30:f4:e7:66:d3:1b:3f:8b:1a:6a:7e:cd:
1d:13:9e:ed:f3:12:00:e3:c4:e2:1f:cf:52:ce:a6:
59:c8:89:e4:05:1d:d7:32:b0:cd:bd:e2:d0:a8:27:
b0:ed:a6:fa:ca:29:68:b2:6e:f7:cf:6e:5b:4e:0e:
2d:f1:ea:09:06:92:16:4b:e6:84:67:fe:ad:ad:d6:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:AB:B6:F9:1C:0D:8B:06:3E:46:F4:B9:B7:A7:62:7E:05:41:01
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:95:57:74:35:a1:52:a2:77:28:bb:9d:76:f9:12:44:24:7b:
8d:82:3d:68:ea:c3:a3:b6:dc:e6:0c:9e:4d:d3:f3:da:08:9f:
91:6d:26:3e:a8:73:13:0b:80:27:4d:77:2d:01:b4:95:1e:80:
09:a3:1e:3e:f2:9d:f6:56:cb:09:42:7c:c6:0f:e8:8a:7b:42:
2b:51:50:53:9a:35:53:5b:57:88:3b:f8:1e:50:63:7e:98:c4:
d8:1c:6d:43:c6:65:36:7f:4d:71:53:6b:88:4f:10:4e:0f:56:
ee:b2:40:13:fa:5c:5b:6a:6d:3e:b1:ea:01:02:62:cf:1d:50:
e5:45:5b:3e:0e:10:61:7d:6f:77:e7:21:34:64:52:fd:fb:ac:
73:45:dd:79:d1:92:9c:f7:91:08:93:21:97:a0:c9:f2:1e:bb:
08:09:b4:fc:a2:34:0c:f4:6c:93:51:94:19:89:4a:2e:f4:48:
d6:20:1b:fe:40:64:ab:69:96:f6:c2:fb:50:3f:36:07:51:7a:
5d:35:1b:ea:b6:93:7f:86:04:d7:c7:ab:db:d3:2e:d1:33:b3:
fd:eb:e3:28:db:b9:ec:41:0f:cd:ad:37:9c:81:fc:dd:c0:c5:
25:65:02:ba:c6:0c:a4:cb:77:12:79:33:01:d0:6f:dc:02:96:
1f:85:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:55 2025 by rpki-client