Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: nNBpbnpWvFyoe+OQJP9s9WwB9vd3xHDEgKgKAIEDkuA=
Subject key identifier: 32:F8:35:71:15:AD:78:A5:6F:B5:46:09:5F:50:92:80:36:0E:B2:35
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0194BC04DE2CD0937EBA6DE02E6338DB0FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 3JE9rhf45y9MFMHHEUa8WDEPDRZ/lvKnpQyxAk75P2w=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:de:2c:d0:93:7e:ba:6d:e0:2e:63:38:db:0f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=32f8357115ad78a56fb546095f509280360eb235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:8b:11:2f:08:6f:a0:dd:be:2a:c4:36:4a:
47:59:ec:d4:89:9a:9b:9a:67:f0:b2:fe:d1:f4:04:
63:33:9c:cc:3f:81:c3:03:57:de:52:32:b7:33:2a:
c3:85:13:66:99:e2:d1:0d:4b:28:88:c9:8c:65:18:
e1:f4:f9:d1:5c:b5:03:09:de:03:d8:85:97:d1:ee:
e5:9f:14:e4:f8:ee:b8:53:24:a1:b8:d5:80:d0:ea:
03:e8:0f:ac:65:3d:35:73:35:55:cb:d3:62:23:24:
fe:56:9d:17:53:5f:ea:6b:9c:b7:ec:5d:e1:05:81:
8d:f8:42:11:87:17:6f:8a:c7:92:2e:a0:ca:b0:be:
67:80:17:3e:d3:19:d3:59:e9:59:6e:75:dd:9a:e2:
0b:d1:63:c4:c7:b8:a5:0d:58:e5:6b:76:bc:0e:93:
a1:5a:ea:a9:f5:8c:a9:84:23:c0:ba:da:af:d4:51:
85:60:2b:23:60:1d:6e:4a:a4:78:31:d5:67:5e:80:
9c:6b:59:6e:32:ad:45:35:ab:fe:3b:fd:fc:41:08:
ba:94:50:05:ba:bb:3f:39:c2:cc:51:db:7c:93:7f:
fe:ca:06:da:e8:51:d8:de:b0:66:bd:b8:76:8f:5a:
69:3a:ef:d0:cb:13:56:08:ee:2f:d8:ac:bf:4d:84:
57:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:35:71:15:AD:78:A5:6F:B5:46:09:5F:50:92:80:36:0E:B2:35
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:fc:9b:17:d5:21:65:28:87:d1:42:32:e2:49:a5:68:f2:
28:25:54:1d:43:63:cc:51:ee:97:6c:2b:3b:e6:03:ec:de:6b:
db:b9:44:99:34:87:6a:bf:93:5a:c5:1b:37:c6:7b:fa:90:d1:
1c:7e:5d:58:c5:53:94:46:82:1c:13:53:8d:b8:b0:41:cd:e2:
a3:2f:25:1b:40:84:3c:ac:0a:cc:36:0b:48:97:a3:b5:65:6d:
2a:3e:9b:59:2f:cd:c4:53:8b:bd:29:77:60:f8:29:86:96:47:
99:b2:cf:aa:7c:a8:89:91:ed:12:01:98:3d:fa:dc:17:3a:eb:
22:cf:6c:dc:17:aa:de:e6:20:cd:ea:4d:38:64:82:9a:0e:b4:
ee:40:6c:db:c4:2b:6c:13:d3:32:bb:3b:b4:65:b3:61:02:60:
dc:2e:8a:f4:16:44:75:49:da:e9:93:a0:f6:05:5a:a3:c8:6d:
69:90:fb:17:d2:98:c7:2f:40:9a:50:80:d3:c0:4a:a6:98:1d:
e8:22:b5:30:a7:0e:40:be:1e:d1:fb:c9:11:1a:47:be:b8:be:
b5:c2:f4:18:7d:ee:7f:28:6c:11:25:c9:7a:4a:a4:57:4c:69:
55:03:03:f4:7f:df:77:24:f6:7d:46:e7:ee:1e:f9:c4:e9:85:
23:ea:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:56 2025 by rpki-client