Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: 4xqi6HvMSlP4Uh4P8qeWGeBYsHNPYqX0PRCIdi9PkUY=
Subject key identifier: B0:C6:CC:9D:C6:B6:08:43:1A:46:A9:A5:A6:67:03:A3:0F:BB:CD:B7
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0194BC04BC62F1A22F88B5205F9801B8C46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: DDbBuN0dOt99nHa3S56BfTLJaef3GTakTwOWvMrr6HM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:62:f1:a2:2f:88:b5:20:5f:98:01:b8:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=b0c6cc9dc6b608431a46a9a5a66703a30fbbcdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:f6:60:af:ad:07:96:eb:b6:fc:16:8d:d2:
7c:6c:c2:a1:15:46:77:92:c3:8d:f4:3a:45:05:59:
9d:cb:94:70:95:fe:67:b7:dd:3c:a0:64:34:51:bf:
c2:62:ff:77:84:f6:48:48:43:15:dc:f6:dd:0c:c4:
50:dd:b6:73:4e:bd:8a:9f:57:38:73:94:07:ec:b9:
89:7d:c7:c2:19:95:5d:a6:89:ac:3a:68:36:c5:a2:
e6:2a:3c:bd:82:32:45:2a:6a:e2:03:91:8e:ec:17:
ae:2a:cc:6d:3d:49:0d:b6:1c:f5:64:77:77:51:ab:
fd:03:e2:ac:c6:b3:34:3b:34:50:e1:bc:df:a3:4f:
46:ed:b8:c6:d6:56:c3:33:1d:f3:ec:29:27:69:93:
30:18:83:a7:f1:4d:4c:c8:79:5a:1d:bc:9f:52:2c:
f9:92:02:64:15:58:14:1b:d1:f2:82:02:5f:09:ed:
f3:e2:07:1d:58:d0:12:13:13:4b:2b:4b:cb:7c:05:
0a:35:99:e4:12:ad:c3:95:94:6d:d1:b2:37:cf:e8:
d6:d5:90:af:76:5b:23:7a:fd:19:e6:52:f4:d4:a5:
84:7c:a9:8e:97:d5:ae:96:d7:19:b6:e0:87:78:6e:
1f:03:a7:66:ba:95:51:02:8c:02:31:e0:49:72:05:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:CC:9D:C6:B6:08:43:1A:46:A9:A5:A6:67:03:A3:0F:BB:CD:B7
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:43:27:a7:95:89:df:f0:0f:6c:6e:92:77:fa:ef:94:b5:8b:
5f:fb:74:46:60:ed:a6:d7:a0:5e:d3:28:7e:07:f5:e5:34:92:
fb:6d:9e:8c:5f:1b:17:23:87:23:52:6e:71:47:84:d8:ff:e2:
e0:d9:fa:23:5c:f4:0f:7c:4a:f5:6a:da:5d:dc:73:99:a2:08:
65:fb:41:e0:7d:55:4c:e7:30:ee:50:59:4b:74:b4:02:6c:77:
76:6d:45:ad:64:21:5e:02:c3:9b:99:8b:c6:b1:76:58:d9:69:
3d:f2:54:a6:23:ea:c1:f9:67:79:92:1d:01:db:cc:76:80:33:
b9:00:08:f0:46:c5:54:05:b7:2d:a9:9a:ae:75:40:88:7f:b9:
a2:84:4b:3b:2c:97:e3:f3:68:05:72:bc:f6:2a:9d:25:11:33:
81:c4:33:99:2e:7c:7e:3f:57:23:74:32:85:3c:94:eb:24:97:
52:71:2d:ec:92:ea:d0:08:d9:a5:bf:ae:f8:84:50:c7:89:0d:
e5:6e:ea:52:0a:7d:50:52:a9:4f:20:a5:89:f7:04:f6:ee:56:
86:a2:b0:68:48:0f:a8:aa:85:69:5d:da:ae:78:b0:74:2b:00:
38:cf:50:df:6c:20:a9:a6:6d:42:1d:79:fb:7a:cb:82:ed:73:
1d:74:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:15 2025 by rpki-client