Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File: dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier: //TQjAgRnRPqrufNthEsUyuDPGv+krXZQlBae7z3hxc=
Subject key identifier: 14:E8:B2:41:A8:FF:C1:5C:C0:FA:5E:51:91:F9:6A:D6:D6:E3:B3:5D
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 0194BCA973E16F7E1DF49F6D30737D6C4FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number: 13C3
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: BGiRBfnOY5M108ZLR5oGn7FUp6G/3pHkMKC/ftFzL70=)
2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:e1:6f:7e:1d:f4:9f:6d:30:73:7d:6c:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=14e8b241a8ffc15cc0fa5e5191f96ad6d6e3b35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:33:48:c5:1f:a6:2e:1b:a6:f9:f0:01:5e:
b0:04:f2:b9:bb:9e:e2:b0:35:4a:e5:8c:65:6c:cd:
a6:a7:28:9b:f7:41:cc:61:d5:3e:7f:79:71:12:22:
5e:8e:83:81:67:15:0c:e2:91:8c:d3:07:40:8b:4b:
bc:70:d7:b4:f7:b0:92:99:bb:86:df:81:31:b5:39:
47:06:53:14:94:5e:28:76:56:f7:8b:b4:da:34:5f:
f3:d5:31:ba:7a:62:70:3b:b6:c6:5f:3d:52:e7:0a:
b6:1b:53:57:df:af:03:50:78:a5:26:ad:0b:01:be:
87:19:65:16:9f:26:55:4e:a6:62:0b:f5:42:b7:d0:
2e:80:d3:62:07:31:39:c8:83:35:a1:d9:58:7b:0d:
0a:23:e3:ed:c3:cc:79:66:a9:f5:c1:d9:2c:0c:0f:
83:ad:07:d8:77:3f:1e:3e:65:f0:09:81:91:1a:f2:
51:0e:58:15:48:a8:69:a0:8c:00:f5:d3:99:55:50:
c4:72:85:91:64:68:bf:af:18:32:5c:61:6b:4a:37:
db:80:bd:eb:c9:77:bc:6a:c2:30:7d:fe:eb:97:f8:
55:7e:a3:5e:5b:44:7a:f7:37:78:7b:29:74:25:3d:
e6:e0:52:c3:bd:a2:7e:9b:5f:92:0f:b5:34:ae:dd:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:B2:41:A8:FF:C1:5C:C0:FA:5E:51:91:F9:6A:D6:D6:E3:B3:5D
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ba:6c:64:df:23:b6:d4:5b:76:e3:28:7a:3a:0b:e4:9e:ca:
1f:ec:dd:dc:03:a6:ed:16:22:c8:91:b7:30:39:86:18:34:e2:
a0:8c:db:96:87:92:5f:fa:15:b2:4f:8a:d8:75:09:55:87:0e:
f8:f1:63:db:83:47:4d:4f:2f:5a:ab:74:f6:e0:8e:59:cb:45:
dd:ed:31:42:e8:e4:86:c1:fb:98:11:58:bb:41:c3:03:86:43:
f5:2a:69:86:77:3a:fb:b8:6c:fa:d4:f9:d8:e5:f4:0e:13:01:
05:f4:ba:0d:10:87:58:20:80:ef:08:80:da:ca:80:03:99:8a:
0c:3d:a9:c7:87:08:4e:80:6c:36:c5:ab:dc:72:b2:1a:a8:72:
d9:5c:c5:c6:e6:1d:d1:a2:0c:e2:44:98:81:05:54:22:6b:e0:
26:12:e2:dd:63:fb:fc:3e:2e:7f:b2:62:35:e8:91:3d:50:7d:
f1:82:9d:fd:63:20:1b:de:f5:6d:63:00:a5:af:81:3f:e8:5f:
74:66:a5:54:c2:bc:e1:2e:29:e3:5a:f6:80:73:c9:e2:6e:9c:
37:64:97:09:22:d0:32:37:c8:3c:20:3a:81:13:71:48:44:d5:
51:a7:22:d8:fe:9b:ed:23:1e:1d:38:85:cd:8b:f8:aa:0f:1d:
a5:7f:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:29:56 2025 by rpki-client