Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: o5Ix4sYKStxmS9ldESUNGKrcLgFaOvykqFn/9cRHxHg=
Subject key identifier: 76:3F:C2:03:DB:14:CA:23:6E:DB:CA:21:D6:F1:B2:F2:FA:16:F0:9C
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 0194BBCE678230E90F88ADA2CBB8A1FEE1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 03FD
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: Rt5jE7bpE5STLwq5GfFtHsF9AKWwyVmZv9RRjmlsOis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:67:82:30:e9:0f:88:ad:a2:cb:b8:a1:fe:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=763fc203db14ca236edbca21d6f1b2f2fa16f09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:4a:e3:e8:f4:f5:6e:c9:da:3b:cb:2f:33:
a6:df:a1:1a:bd:0d:74:3c:34:b5:5a:34:58:53:da:
e1:73:7c:fc:ed:cf:96:c6:cf:63:3b:1e:7e:d3:ce:
8f:25:64:c7:e8:2d:6f:f0:43:83:c5:13:a6:9a:2b:
d4:8d:03:11:a6:a0:4f:59:b1:86:77:e2:77:c0:42:
1a:29:30:b9:bf:ad:d2:3a:73:d0:c1:3c:c1:f9:66:
6e:a2:10:91:b3:54:19:ae:6e:b6:be:1e:7e:a5:72:
63:4c:9a:97:86:81:81:af:66:cb:f5:b3:57:a5:a0:
d6:d6:7c:e7:f7:fc:12:82:2a:e9:2b:c7:4a:1a:96:
b7:40:fb:2d:c6:b4:d6:b1:28:37:aa:9b:21:0c:f5:
a7:33:2e:be:c9:e2:e8:01:3a:f1:83:59:b6:eb:11:
9e:20:0e:8e:b9:f1:6e:78:d2:a3:cc:e7:5b:40:e4:
45:62:b3:7c:87:0c:96:b7:ae:0f:f5:28:26:9c:48:
3e:57:07:06:61:15:c9:5f:f6:14:61:3e:69:8a:4d:
5b:58:ae:5c:b0:4d:07:11:39:63:d3:3a:4f:a6:c3:
8b:b7:97:68:6b:4a:2b:1d:3b:4d:bf:b6:54:d2:90:
62:96:81:50:84:df:c6:e4:ef:4c:9e:47:a4:62:c0:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3F:C2:03:DB:14:CA:23:6E:DB:CA:21:D6:F1:B2:F2:FA:16:F0:9C
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1e:f1:02:90:25:73:6f:ec:66:b8:86:10:4b:27:7d:0d:f1:
e9:42:96:0d:90:c6:32:b3:b5:c0:b8:fe:30:66:1e:e4:f3:a3:
4d:d9:5a:8f:a9:18:ba:17:90:83:64:1d:fa:b3:9f:12:f6:49:
7f:5e:f3:4d:1f:26:84:12:c6:a6:fa:9b:74:97:68:2d:02:0b:
a7:7e:88:ef:d1:5f:d2:fb:02:c4:1b:7a:fc:c7:37:ee:3c:0f:
9e:96:c2:29:ed:ad:f1:ae:39:dc:e2:f9:28:f7:15:f4:e3:9e:
81:44:9c:52:ca:75:37:cd:92:6d:2b:3d:c2:e3:8d:d0:d8:50:
2c:dd:6e:ad:46:41:98:12:ac:7f:a2:2c:2f:40:29:af:d8:d2:
84:b0:27:b5:5b:da:a1:ff:ca:4f:a3:5a:ef:56:4f:d6:86:ad:
b8:b9:70:5e:95:01:5e:34:65:72:72:b0:f4:51:be:c4:3f:87:
0b:31:29:d9:c7:81:b7:4b:d6:f0:23:6a:2d:ef:f5:a8:35:5d:
60:27:0c:8d:98:f7:a9:e9:d7:1e:d9:35:da:44:c8:5a:fc:4b:
33:b8:64:64:f4:7e:8d:36:81:af:91:51:74:f2:9c:0f:1d:12:
e8:cf:80:06:1d:83:ef:46:06:78:a7:49:a3:47:fe:78:8c:33:
b7:a0:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:17 2025 by rpki-client