Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier: Qz8mndKjTeoaiFPozu4MQAnhr/s3XQmFL1Xl5/r8qAg=
Subject key identifier: D6:41:BA:57:ED:CB:E4:34:E0:8A:02:94:81:6C:49:11:0A:68:13:6C
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial: 0194BCAA34880966A436D7F55302A5E3B644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number: 015E
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: JpC9P4tylN08GW0w0YAIgSjkqPJnSPgAcvvtPaTg9ZA=)
2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:88:09:66:a4:36:d7:f5:53:02:a5:e3:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=d641ba57edcbe434e08a0294816c49110a68136c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:da:06:92:cf:cb:25:bc:28:c3:c1:b8:56:
27:82:ab:a3:33:4a:b5:dc:35:71:af:99:61:40:3f:
21:bd:9c:6b:5b:84:22:56:81:93:e7:f2:d2:c1:f3:
0f:6e:23:c9:8d:8d:71:35:22:49:70:9e:83:99:4b:
1e:7a:53:e9:9a:90:9a:58:69:5b:44:8d:cf:8b:d4:
7a:91:c0:3a:fa:e2:49:51:8e:1c:55:2c:19:8f:96:
9d:87:79:3c:18:99:5b:99:d0:07:89:4c:bb:b6:1a:
4a:df:d8:a4:18:92:af:04:e9:b9:98:87:af:fc:35:
8b:97:d7:44:08:52:81:2d:da:76:3e:d7:67:7e:71:
18:2b:eb:77:41:17:d5:1b:e6:a9:72:09:a0:96:e1:
5f:a2:e7:15:67:68:14:32:bb:5f:fd:2f:28:e4:09:
0f:e7:e3:0e:84:1a:1b:e3:64:5b:29:46:4d:8c:ea:
0b:63:52:bb:0d:d1:17:5c:58:18:a0:c5:f6:52:75:
33:3b:d3:04:f1:3a:7a:1c:a4:4f:db:99:58:1d:d0:
cb:de:34:98:e0:a3:85:42:8f:ac:0c:a5:37:ea:4e:
ab:e9:8d:de:07:4f:6e:18:91:fc:4a:d2:c3:d2:e1:
7f:11:b2:a3:03:bc:4e:fb:79:41:d9:4f:50:0a:70:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:41:BA:57:ED:CB:E4:34:E0:8A:02:94:81:6C:49:11:0A:68:13:6C
X509v3 Authority Key Identifier:
keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d7:2e:cc:a3:45:3b:86:10:4e:7f:9f:3a:cc:b2:33:d1:d3:
41:bf:0b:22:0c:51:e4:4b:74:08:c0:55:7e:77:0e:88:fc:69:
af:ac:ad:d3:ca:be:ad:cc:f6:1c:1a:8a:dd:15:87:22:d3:ac:
29:07:b3:fc:29:49:6d:56:8e:e7:17:4f:84:79:6b:36:28:35:
4c:b3:68:34:7e:67:d6:74:9d:03:be:28:28:5e:54:cb:a0:17:
82:1c:dd:58:1d:f1:bf:d7:14:b8:d2:c7:1b:66:af:d3:33:5a:
52:04:b8:b4:eb:8b:a0:c8:02:0b:4b:ce:54:90:55:bb:73:04:
32:e8:ba:13:17:36:11:4d:da:c1:08:58:e0:ad:a8:1d:db:82:
cb:4f:94:1b:0c:13:71:d3:c3:1d:6a:47:b9:79:14:6c:92:ef:
d3:19:1d:2c:88:6c:58:68:99:14:00:55:b9:37:f6:30:e5:cb:
d0:86:0a:de:b2:8c:79:dc:12:4a:f7:71:c8:e0:ff:ff:40:aa:
39:f4:13:78:61:5b:b6:e9:b0:7e:2e:96:89:e7:c0:02:34:44:
66:ab:f4:02:d0:41:6f:9a:81:e1:60:2c:80:32:b8:a2:6c:a1:
49:fd:f7:61:26:c6:ed:3b:9c:b7:42:24:7b:57:86:f7:17:f8:
0a:24:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:18:55 2025 by rpki-client