Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: TwraevaTkmk0BgmXazEZx8j0WmyQlPkwQ0CY3a7iR1E=
Subject key identifier: D6:DB:40:49:A8:F4:01:C5:EC:FE:D0:17:AC:90:CB:BF:C8:E9:30:57
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 0194BBCE0E898432DC95650E8066E87E7A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: ZJXAn/UxRoiwYJ7v2z8N7MtOm0WHp4d2or0TXfTJjHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:89:84:32:dc:95:65:0e:80:66:e8:7e:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=d6db4049a8f401c5ecfed017ac90cbbfc8e93057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:00:c2:3d:98:94:9b:aa:2c:52:96:37:08:
75:fa:03:73:cf:cf:8f:4d:12:a7:4f:08:2e:ab:f5:
c9:b0:ba:2c:9f:17:8f:60:78:be:3d:3e:da:43:dd:
6e:0e:ac:ea:18:11:4f:65:7e:da:49:51:35:50:54:
b7:a4:2c:5d:98:84:f1:ec:da:1c:d2:dc:c8:2b:b6:
2b:6d:3d:d6:36:52:83:dd:f0:8f:65:44:76:d3:49:
e3:44:fe:8c:5a:33:d5:d7:b6:68:72:1e:3d:c0:ae:
3f:c6:22:6e:6c:66:6f:b2:70:f6:ca:ab:cc:5b:03:
94:5e:d6:f3:4a:fd:cf:2f:ee:d1:00:b4:4d:3f:cc:
be:74:b9:18:71:a4:b7:f8:3f:e3:7e:f3:36:ae:85:
75:91:46:36:06:22:0a:b3:3b:40:12:77:72:08:16:
a3:7b:b2:39:15:68:47:87:60:bd:e0:10:cd:2c:ee:
3e:d8:98:8a:67:ff:39:66:d4:d0:ea:1a:d6:0b:ba:
60:6e:58:a9:ab:71:69:4a:d0:f0:1b:7a:b5:74:f8:
10:03:19:51:22:a9:99:98:a0:a4:db:14:40:af:ec:
d4:28:90:e5:cd:a9:6c:7b:0f:02:3f:2a:56:ef:eb:
c5:8e:98:4f:79:24:ee:83:c5:0f:e7:d2:38:7b:7c:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:40:49:A8:F4:01:C5:EC:FE:D0:17:AC:90:CB:BF:C8:E9:30:57
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:ed:66:eb:bc:3f:20:3d:44:d3:ce:d7:04:18:ba:e4:ac:
01:72:cf:78:f4:bd:45:b8:be:41:fe:98:93:68:30:c5:56:e6:
c3:4c:6b:bb:72:ff:a0:d6:31:71:33:58:b4:c6:c7:8e:e9:a0:
d6:42:eb:28:c0:ea:d2:62:91:c5:6d:fc:86:8e:f8:85:2d:5e:
54:03:42:e0:9e:9f:27:26:ec:c3:0a:1d:b2:a1:36:ed:79:12:
e2:c6:1a:b3:3d:fd:4d:98:e8:72:c9:f3:64:82:ed:da:d3:32:
17:45:21:f8:5b:d4:97:89:98:01:8f:e9:e7:f6:5a:6e:d6:8a:
08:a4:c5:a0:b4:e6:08:9e:0d:46:78:f6:1a:eb:bf:02:35:3b:
8a:f5:1f:15:b1:51:31:c3:9a:72:d4:a2:23:e7:25:80:45:bc:
f5:57:f1:0c:ff:50:07:44:e5:2a:6f:1d:24:ce:1c:ec:7e:bb:
e2:e7:a3:23:45:32:d5:17:b5:de:e5:e0:c9:a5:86:86:c6:51:
e5:98:91:e8:7c:f7:38:52:b3:ce:8a:7f:da:6e:82:f8:aa:99:
1f:5f:31:b4:08:9f:4e:b5:d1:ac:9f:0c:3b:91:90:0b:41:a1:
0f:6a:29:2f:b6:90:77:9f:9d:27:fd:1c:44:ad:02:b7:16:c3:
ce:75:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:32 2025 by rpki-client