Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
File: dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft (raw, json)
Hash identifier: JPbG4zk1dwijx1LxNSRpZXKBoN7ekhtnxPGHv50Opjw=
Subject key identifier: A5:20:44:5F:75:2B:BF:C0:37:FD:95:34:56:F7:F7:1A:A8:2A:DE:7B
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 0194BD4E9C24E4033A5968AE78FE8156C8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (hash: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=)
2: dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl (hash: nRi1vyw3AGUEm0usxDv4cvVyy0cYIaCJBrilcVY5i8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:24:e4:03:3a:59:68:ae:78:fe:81:56:c8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=a520445f752bbfc037fd953456f7f71aa82ade7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:34:ef:36:52:4c:7a:a1:26:16:42:ab:07:
d2:51:69:01:92:cd:45:bf:d7:32:2e:df:e4:b1:95:
df:14:1c:17:59:c3:c6:df:4e:8f:39:71:3b:0c:3d:
60:ed:97:23:a0:b4:d1:13:70:21:90:ac:77:3e:58:
82:f2:30:45:95:74:7b:6c:8e:33:d2:f3:25:13:c3:
83:0b:0a:2e:9e:54:ef:b6:a8:27:4a:a6:15:70:61:
7f:ca:e5:58:72:bb:1c:12:45:5e:53:87:e2:a0:c2:
3d:69:81:d0:cd:cf:45:fb:a3:43:03:9d:46:ea:22:
fd:61:b7:f8:17:80:10:0b:9f:7c:95:16:4b:b9:18:
7a:fb:00:79:e8:f8:7b:b7:39:d2:e0:86:cc:07:85:
64:f1:82:32:99:60:7e:9f:81:0b:9b:7e:94:8d:31:
6a:c3:94:20:84:b9:08:4f:b2:b6:6f:1e:29:ed:1c:
c1:da:77:ec:a5:e0:27:43:fd:c8:2c:a7:85:c4:8b:
64:b9:35:38:72:97:36:22:67:73:9b:ee:02:3e:bf:
f3:91:53:a9:59:0a:ff:ac:96:ca:95:1d:16:92:2b:
d1:68:e7:6e:e8:06:72:f1:e4:22:b8:f4:eb:09:98:
23:69:bf:e6:3b:4c:5c:08:42:e4:e5:52:87:c7:c7:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:44:5F:75:2B:BF:C0:37:FD:95:34:56:F7:F7:1A:A8:2A:DE:7B
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b2:34:51:cb:89:15:a5:8e:19:8b:d9:39:ac:c3:4f:a2:18:
60:4f:30:6e:f8:1e:90:7d:74:2c:aa:08:c5:46:8f:3f:84:8e:
3f:2e:21:61:ec:12:4a:d7:70:a3:ef:b3:39:8d:23:9e:69:aa:
fa:4a:bb:c0:c5:dc:ff:e9:c7:6e:2f:92:24:af:17:dc:59:ec:
11:ac:e5:db:e6:92:1a:a6:43:4d:55:d7:cf:58:f9:ca:94:f6:
98:56:e5:b9:34:df:36:83:5e:7b:75:af:47:6c:a8:83:93:46:
e9:dc:ff:a6:99:d5:d1:fe:83:fe:28:01:76:64:0a:df:94:fc:
d6:4d:5e:c2:8c:b4:b4:b3:95:cb:f8:44:62:53:88:04:43:bf:
d5:ef:d3:84:fc:fa:c3:a5:3e:be:bf:2f:cb:e9:87:6f:a6:98:
05:da:77:9c:d3:4c:48:2f:c2:6e:2e:5d:d4:0d:4a:43:94:38:
11:6c:c0:62:0a:00:f3:f9:99:c0:95:eb:e2:8a:5f:79:e6:3d:
62:ea:c8:85:77:3e:2c:4f:4a:7a:e3:bc:b1:29:6c:e0:25:91:
d3:38:9b:89:74:64:56:88:5c:43:1b:6f:dc:f3:7f:b7:81:bb:
d1:00:21:db:30:2b:c0:4e:db:81:05:3f:85:12:89:d8:24:24:
9b:7d:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:26 2025 by rpki-client