Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: 5jKSJW5ebaxFunEUwD9vHgqYdJW/TEQ9PmVDwb1uMEE=
Subject key identifier: F3:AC:97:43:8A:3D:33:B3:BD:E1:05:58:AA:3A:FC:64:56:1F:AC:E1
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 0194BCE0729D2184D807E61D96521B6C6C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: xdG7ZSxN7LXxw9NErn4lI0JfIW/c+9PG8RGsNOueXpI=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:9d:21:84:d8:07:e6:1d:96:52:1b:6c:6c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=f3ac97438a3d33b3bde10558aa3afc64561face1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:2a:a7:c2:ff:0c:b2:2f:db:1f:be:41:4d:
94:5e:69:15:91:3b:67:bb:22:0e:a7:70:ad:e8:6a:
2e:c1:57:da:70:3e:d3:32:5a:e0:93:01:9d:41:14:
6c:f5:71:fd:88:66:89:22:24:6f:57:48:de:9a:c2:
3b:fa:6c:c3:77:46:5d:02:8f:7e:2a:4f:ff:ee:74:
9d:6a:51:cd:4f:8d:33:08:a1:77:42:99:b2:9c:0e:
79:6f:d3:fb:45:1f:ff:f7:9e:e1:62:3e:48:1c:b3:
de:a8:1c:91:a1:65:b3:dd:2b:5f:c2:2a:7d:dd:3b:
ac:87:32:96:32:5f:bc:9b:08:b1:5d:9a:6c:da:8a:
e7:cd:60:00:b7:5a:ae:7e:15:53:5a:0c:58:c1:57:
d7:73:be:37:85:9c:0d:d6:e0:f3:f2:96:bc:b1:22:
31:55:e9:88:2e:76:c7:07:c2:62:f5:15:ed:60:b2:
12:45:7b:a6:d6:73:a9:97:63:17:c5:8f:17:c9:1d:
99:f1:4a:04:0a:af:98:82:4b:24:34:e4:b4:64:b9:
3e:13:7a:a5:e7:b9:ec:5c:a2:ae:0e:b2:1c:3c:a6:
38:3d:da:3e:67:87:b3:eb:f9:7b:fb:cd:bf:c2:f5:
63:c8:fb:29:a8:ae:b5:4a:9e:7b:f4:4c:e7:4c:02:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:97:43:8A:3D:33:B3:BD:E1:05:58:AA:3A:FC:64:56:1F:AC:E1
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bd:fa:90:ee:2f:3e:fe:29:4b:d9:dd:b5:42:8c:4f:db:eb:
2a:c2:1a:b2:4a:70:9e:f3:50:9e:d2:db:aa:1c:c1:35:aa:43:
ab:b6:24:ec:73:a2:26:61:26:3d:f6:03:74:4d:76:6b:58:ff:
a5:b6:c9:6d:02:e4:d4:2e:ad:8f:45:bd:9c:48:49:b2:1e:fe:
c2:36:9d:2d:8d:44:3d:8c:39:0d:d8:c6:3d:ad:00:62:7b:29:
19:49:9b:02:96:fa:d6:9a:ae:c9:7c:27:05:72:06:c2:04:e5:
c2:34:83:25:1b:ed:08:99:06:c6:58:4d:3b:cf:62:60:b1:fd:
ee:c5:48:ff:0f:4d:41:81:78:28:60:57:78:4f:49:3a:cc:ac:
44:96:e2:46:49:95:86:7a:68:47:87:32:c0:d7:f7:f2:0e:b9:
5c:04:40:b3:42:e3:05:f8:90:38:85:f9:bf:32:22:81:05:d8:
a1:c5:00:2f:ee:1f:fb:a3:2f:08:7b:64:77:86:bc:10:4f:2e:
12:26:df:34:8b:6e:c4:65:d0:93:d7:e3:af:f2:4b:fc:42:b3:
f0:6f:03:f8:94:02:32:4a:a2:58:39:20:1f:2b:81:a6:e4:26:
c3:24:b4:a8:dd:ce:07:ce:18:5f:af:c6:f7:95:88:f0:60:07:
6e:0a:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:55:56 2025 by rpki-client