Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File: DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier: 6KNdoS4Kayu7lYwNw4lZo4AXVULFToh22v016P9eZvk=
Subject key identifier: 2D:3B:57:98:08:19:29:1D:6C:0A:41:96:E4:39:2C:9A:18:B9:83:AF
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 0194BC04FFC42776B1C1EB9B0476CBDE2486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number: 1158
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: Nb2yXI7q4O4S70jU+3XnzscRlxJAo4CX9MQYHWwhass=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:c4:27:76:b1:c1:eb:9b:04:76:cb:de:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=2d3b57980819291d6c0a4196e4392c9a18b983af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:30:52:ad:c1:b0:0c:96:60:a8:11:61:b3:
fb:ec:bc:f0:e3:b3:02:fc:25:9c:15:19:74:7b:ae:
6d:ae:f0:05:7c:83:fc:2e:7b:79:b2:a3:90:44:74:
d1:84:62:c0:ac:13:95:38:07:74:50:bd:2b:36:04:
15:8c:31:5b:90:96:ac:ab:a2:97:84:58:93:4c:c3:
01:08:85:45:b9:7c:19:c0:80:5c:53:2d:a4:75:60:
95:be:6a:a9:51:15:5b:df:89:75:f7:6a:c5:37:2b:
cd:2f:cc:35:a3:0b:57:3e:fd:78:38:50:e6:2b:d2:
b6:31:b7:97:55:0a:4b:18:be:58:fa:87:1a:93:4c:
7c:5f:32:39:5c:ca:3b:d3:b7:b6:78:d8:af:e7:d9:
7b:95:5a:d6:9a:b6:20:9a:dd:42:8a:19:66:ec:f7:
46:de:4f:e4:b4:1b:8b:06:3c:85:96:7a:16:61:e5:
5d:3d:88:f1:cd:6b:de:0f:3d:0c:03:a6:4c:60:21:
d6:93:4a:99:bd:4f:68:72:95:be:35:ef:8d:56:3f:
39:e6:26:7d:58:48:7e:53:8e:a9:0a:de:fc:b5:5a:
d5:a2:dd:e4:81:38:b2:8c:08:97:c0:99:f4:d4:ee:
43:05:3e:19:e0:97:13:4c:84:3b:cb:e5:ac:23:5c:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3B:57:98:08:19:29:1D:6C:0A:41:96:E4:39:2C:9A:18:B9:83:AF
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f3:3c:60:9a:45:cd:d4:69:7d:e3:37:cc:71:98:e3:f5:ad:
00:58:eb:61:cb:99:e4:1e:a4:34:df:2a:41:6b:4a:c6:b3:9a:
4f:bb:42:95:9d:5d:6a:11:ac:fe:9f:eb:7f:6e:0b:55:06:de:
a5:b0:57:0a:a2:a0:86:50:00:14:ae:a4:e4:ce:45:7b:45:c6:
3a:dd:63:25:ab:0b:b8:6d:0d:f4:71:96:fe:fc:aa:1e:ff:4a:
eb:c9:49:6a:cc:85:15:4a:70:e1:54:3b:36:2c:18:5a:db:c3:
2c:10:bf:68:04:d9:ba:a9:90:21:5b:59:6c:7c:7d:70:d5:71:
2a:9b:cc:8b:a7:6b:a2:ad:d5:eb:57:69:03:fb:03:f8:20:55:
11:6e:98:bd:45:9c:84:c3:d2:14:18:02:a4:89:44:9a:af:10:
bf:c5:72:d2:b1:76:11:69:9b:b8:0c:e2:1c:30:4e:d3:dd:2f:
0a:1f:0a:ab:6f:4e:97:39:5f:30:d2:35:8c:67:23:ae:53:28:
70:01:ed:b2:d2:68:01:74:1c:50:21:b0:44:b4:20:9e:44:6f:
e7:8b:1a:ab:e8:b3:17:42:f1:b4:3e:bb:24:05:04:3b:7d:ec:
d1:e1:f6:dc:ad:4c:40:8a:4e:99:0d:46:a6:f2:7e:2f:b0:55:
a6:79:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client