Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: RGlN9Q8IZt9vMj8bL97tMNHcQM/YcvGwlD3rxOFldyM=
Subject key identifier: 7A:E8:BE:E3:77:F4:CC:C6:28:2B:46:E0:EC:4B:7E:AA:35:85:1B:DF
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 0194BCAA0389A8319172204A88C927B6C984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: QipWhDDL5afafw2nXkxzNikAfQwwMgqP5b7joBU4mXE=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:03:89:a8:31:91:72:20:4a:88:c9:27:b6:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=7ae8bee377f4ccc6282b46e0ec4b7eaa35851bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:ce:52:67:c7:6d:02:61:51:a6:38:5b:a0:
fd:67:ed:69:37:d4:4e:1f:65:04:60:cf:8d:da:56:
45:a2:46:2a:18:24:dc:33:c9:9d:7a:b1:3f:67:2a:
bd:68:e9:a8:02:a5:f9:b2:2f:4c:99:d2:3d:37:ca:
e2:cf:d1:ad:a9:4b:4a:ce:10:15:ae:f2:b7:5c:71:
e2:a5:b1:91:e8:cd:25:58:8a:46:d1:60:2a:d6:bc:
af:4b:29:ff:00:20:f3:34:81:28:a8:33:eb:ec:59:
97:ae:f8:95:52:8f:7a:69:e7:9c:4a:9d:32:b9:42:
a1:f9:75:b8:51:f5:90:cd:30:13:3b:60:dc:e7:27:
e8:a0:98:53:65:d3:10:80:2a:d2:19:0f:9a:44:25:
08:bb:e7:5b:b2:7d:04:23:40:55:43:1a:2e:49:ab:
85:ad:be:89:7e:a7:76:fe:63:e0:ee:86:01:9f:9a:
6d:54:2d:06:31:e9:b5:b6:bb:5a:d0:c1:6d:e2:8c:
de:f1:af:5e:a7:36:9f:2d:12:10:02:dd:77:b0:08:
bc:0e:93:af:71:7f:22:5a:df:08:00:64:34:52:df:
3f:b1:ce:51:ec:64:ba:8a:d1:a4:a5:4f:5b:3c:f0:
f8:76:c8:d7:c3:00:55:21:ab:da:fa:76:c0:d6:1a:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:BE:E3:77:F4:CC:C6:28:2B:46:E0:EC:4B:7E:AA:35:85:1B:DF
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b9:04:83:0c:09:b9:94:a5:fd:7e:0b:ca:7c:ca:a7:73:7b:
16:dd:ce:54:e9:2e:4f:11:82:6c:e4:61:31:2f:66:eb:3a:92:
d8:c3:3c:8b:b6:96:02:aa:99:e1:c1:d6:cf:df:e4:c0:23:45:
0a:0d:ba:07:11:eb:4e:ac:f8:a0:fe:78:b7:66:ed:73:49:6b:
2d:ae:21:06:03:9c:ee:dc:2b:41:d9:81:44:00:f8:1a:e2:97:
05:e2:d4:10:68:29:be:fc:31:18:23:11:bb:2c:21:90:1c:18:
6b:c2:ef:da:07:3b:b2:fa:53:72:a8:fe:a5:00:1e:0d:f7:af:
7d:25:17:47:9d:c9:18:ec:db:05:4a:3a:cb:69:84:f5:b1:3a:
d2:e9:5a:dd:6d:1d:ae:01:45:b3:54:e7:60:a0:2e:d1:1b:81:
12:37:ac:36:5f:eb:54:3b:33:2c:cd:7a:be:fd:df:d1:28:e6:
1b:1f:1e:66:5d:2c:a7:8d:63:c1:49:b5:08:ab:33:c1:71:b0:
9e:c5:00:3d:58:dc:6b:5a:58:28:f2:33:48:78:3d:57:79:b4:
e4:9a:42:08:58:a3:3d:14:68:6d:2a:8e:e8:07:e3:01:32:23:
d5:60:f2:b8:02:58:9e:b0:8c:c7:a4:65:b5:6a:89:84:1a:6f:
8f:bc:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:39 2025 by rpki-client