Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File: D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier: 2J+JnJ8walph494HBLsTIpvwaszzjv/bsyc3nkC5cj0=
Subject key identifier: D0:24:0D:0A:4F:B6:50:6E:1E:FB:E8:57:86:1F:11:78:B2:33:AA:8A
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 0195E1597943C49CFB4DDC42FEA197D2697F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number: 078B
Signing time: Sat 29 Mar 2025 10:01:32 +0000
Manifest this update: Sat 29 Mar 2025 10:01:32 +0000
Manifest next update: Sun 30 Mar 2025 10:01:32 +0000
Files and hashes: 1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: lBVhdlllqPUXqf0sRV/dkAbackmv1glz0GEvUaiBmGE=)
2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:79:43:c4:9c:fb:4d:dc:42:fe:a1:97:d2:69:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: Mar 29 10:01:32 2025 GMT
Not After : Mar 30 10:01:32 2025 GMT
Subject: CN=d0240d0a4fb6506e1efbe857861f1178b233aa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:92:25:ab:ee:f2:c6:c0:c6:c6:d2:57:03:
24:ac:ec:f0:df:89:35:be:c6:c6:6b:51:8e:7c:c2:
0b:5d:0a:36:e8:a7:9e:02:16:e8:3c:a3:e6:a9:0c:
bc:f4:fd:41:b9:58:5f:f7:8b:be:9b:53:41:db:ee:
f4:d3:30:25:ca:e5:e3:46:5b:a1:2d:28:89:f3:27:
c2:16:d1:29:aa:2a:07:f4:b0:ba:b2:7c:31:a2:d1:
44:58:01:df:e3:50:fd:56:90:36:6a:17:05:3a:b1:
ae:0a:10:9c:5f:65:d0:90:d3:f9:32:71:fa:af:05:
7f:c8:85:60:df:90:e9:10:96:1e:72:b9:40:7b:8b:
1a:e4:94:e1:83:e2:0f:50:5b:b6:43:27:eb:dc:3c:
a8:bf:01:e7:92:2d:5f:3b:3b:f0:87:73:9d:19:48:
76:15:16:a7:87:8b:33:c5:da:5d:75:09:bb:49:7f:
47:49:70:ab:fa:9a:72:24:ec:00:5d:05:6b:1a:a8:
df:16:44:52:b6:9f:64:4a:19:fb:ff:55:7e:5f:01:
71:a5:1c:f8:27:e8:6a:3d:a2:f1:b6:69:2d:65:66:
7e:50:2d:62:c7:b7:c9:d9:e8:30:bf:f3:9e:92:3d:
ee:2d:95:b4:24:05:a1:85:6d:17:18:2a:ec:22:87:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:24:0D:0A:4F:B6:50:6E:1E:FB:E8:57:86:1F:11:78:B2:33:AA:8A
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a8:bf:74:29:60:89:2d:19:ee:a9:b7:d5:ad:71:17:45:47:
8a:19:f5:a4:b9:16:91:b9:da:33:28:af:4b:f2:8a:df:2e:93:
f2:b6:03:f1:a8:e1:a6:b8:d7:10:c4:64:bf:4a:85:4b:dd:5c:
6f:12:10:64:8d:85:9f:f2:fb:9e:af:74:6f:b7:60:09:fc:f4:
df:6a:ea:f6:8c:4a:9d:bd:e0:d5:08:c0:36:aa:ad:12:86:61:
7d:ce:1e:01:09:df:7e:12:57:53:08:92:7a:8d:d7:46:42:b5:
3c:03:a2:18:a2:7b:03:e1:4f:a4:a4:35:d8:6e:d6:e9:d0:b3:
00:29:80:b3:27:ec:2c:50:47:af:be:9e:63:f4:0b:ff:5f:6e:
da:74:3d:90:ef:c8:1e:e1:7a:9c:dd:c4:a1:5c:89:7c:ce:9d:
e9:bc:71:96:31:2e:fc:15:48:c5:bf:62:44:5f:36:54:2d:d0:
9e:d2:b6:54:05:4a:2c:bc:dd:a9:fe:2c:46:8c:ac:cd:36:0a:
0f:72:61:32:de:a0:73:8f:70:80:20:2f:34:11:d5:c8:6a:51:
6f:ed:46:da:34:3a:6e:fb:c4:3e:aa:46:ef:17:f9:62:77:6c:
1c:9f:18:a1:d9:87:fe:17:6e:07:02:6d:18:0b:90:d4:b7:48:
c1:2c:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:44 2025 by rpki-client