Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: IlZvL7FIGCrWEwHAkWR1pI+kVhq5mHAc1Dq4FE/mWWI=
Subject key identifier: 61:26:E1:F0:9D:BF:AE:22:90:29:0E:A1:3A:BC:20:B1:21:99:AF:C7
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 0194BC3C10E977EC2E031F460C59BCCA460E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: /V0GLS0nZlR+18nXtU1SBRUES/F86F5Oi6/7WYTQRsA=)
2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:10:e9:77:ec:2e:03:1f:46:0c:59:bc:ca:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=6126e1f09dbfae2290290ea13abc20b12199afc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f3:d2:84:da:b9:bb:f8:ef:ba:ec:40:ce:1c:
ed:2e:d1:e0:4f:ff:ff:0f:ca:19:5d:79:9c:14:19:
6b:f2:d3:2e:1e:bf:e1:7d:c4:d3:88:d0:22:9e:75:
25:6e:07:5e:e5:f4:3b:70:e5:e5:7b:49:9a:83:66:
da:80:59:c4:2a:99:8c:d6:90:e9:73:4f:fb:47:17:
9a:ef:5e:3d:b7:e7:1d:6c:1d:c5:96:8f:82:37:3b:
c4:16:71:bd:69:2e:81:5e:c5:fb:b0:7f:9e:bf:c9:
85:4b:b9:2d:fe:b7:5f:e9:a2:78:d8:66:d6:5e:7a:
1d:25:3e:b5:3a:f1:d4:66:97:13:54:dd:07:ad:1a:
d1:95:48:2d:07:1e:70:e9:3c:e6:ea:28:30:16:dd:
27:dd:ec:62:95:2a:3f:a9:70:99:72:52:93:80:45:
de:43:4d:c7:5d:5a:0d:b9:63:60:a1:f6:e2:90:e4:
73:1f:d2:ff:57:87:f9:03:8d:9d:f5:8b:5e:70:df:
42:ec:31:94:1c:30:3b:26:ed:dd:84:f6:a3:b9:bc:
8e:9d:5c:e6:6c:8f:20:7d:f2:6d:4c:80:77:b5:47:
e0:4c:80:68:4b:6e:e3:62:e2:0f:3c:f6:f8:37:b9:
b8:89:3e:44:17:0f:4a:3f:98:35:02:52:a3:5e:c3:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:26:E1:F0:9D:BF:AE:22:90:29:0E:A1:3A:BC:20:B1:21:99:AF:C7
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:85:21:0d:47:18:dc:7f:84:00:ee:bb:a6:50:2a:14:85:
c6:5f:c9:93:d4:ee:ba:a3:89:e8:66:53:db:b3:80:6d:be:ec:
ea:d4:e9:28:e8:68:15:4f:2e:a0:51:71:16:78:68:b7:fe:e7:
7d:00:e1:d1:e2:b5:8a:43:78:3b:6a:16:2e:7c:e0:d7:69:fd:
76:c6:06:3c:ec:5a:be:15:64:e3:83:bf:cb:c3:62:c6:1e:bf:
a7:5c:d5:ae:ee:fa:e8:b6:1e:40:db:5d:c8:fd:6b:ab:25:5c:
da:71:ab:cd:d7:c0:dd:b5:9b:cd:d1:2a:e8:4a:88:82:c6:08:
e8:cc:e0:f2:0c:17:2c:b4:0e:f8:1f:d8:61:06:12:bb:98:5f:
5d:47:23:88:f6:73:58:32:e5:2a:97:35:58:ef:ee:a2:32:11:
3e:88:6e:1c:cd:eb:dd:da:c2:5f:7b:50:db:4e:47:8e:b9:50:
e9:ec:cb:2b:d7:f2:8d:85:04:2d:5a:44:69:81:85:c8:da:74:
7d:75:cb:ce:0a:e5:15:94:8c:a3:24:4b:7c:a3:ee:6d:b4:09:
09:d1:53:61:fd:f7:3c:95:1b:67:25:1a:36:84:70:4e:c0:b5:
fc:93:29:20:44:57:71:78:00:03:db:ab:4a:1b:af:75:b0:63:
c4:7d:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:37 2025 by rpki-client