Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: qQUm03ECRg9ZG6StmDBINHMv63MMq18a+DNCIw/ojDY=
Subject key identifier: 3F:49:36:16:0B:8C:0C:0C:51:0F:50:81:57:CD:FA:1D:07:16:87:71
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 0195E0B4B677E6D7C394751DBE591696B567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 07:01:34 +0000
Manifest this update: Sat 29 Mar 2025 07:01:34 +0000
Manifest next update: Sun 30 Mar 2025 07:01:34 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: NEJDf2kP3tokpCscHq3fp4sjarxXWHSholZ5gV/GKBo=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:b6:77:e6:d7:c3:94:75:1d:be:59:16:96:b5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Mar 29 07:01:34 2025 GMT
Not After : Mar 30 07:01:34 2025 GMT
Subject: CN=3f4936160b8c0c0c510f508157cdfa1d07168771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:d1:6d:3c:a2:3e:8a:fc:ab:59:d0:d0:b0:
8f:22:12:ba:01:a9:f6:8b:78:66:e5:0f:cd:1b:63:
0b:c8:d5:a6:07:c3:d1:eb:6d:19:74:51:53:f6:6c:
bf:ce:15:ec:1b:bd:54:85:5b:e6:e5:ec:fd:42:40:
3c:8a:81:e3:d7:76:3b:8a:b6:42:ae:35:e1:9d:bb:
46:d8:7e:6a:2c:26:dc:17:59:4e:52:b1:56:b7:38:
a4:ce:f2:64:ff:f8:36:81:15:dc:92:0a:74:c1:14:
8e:bc:93:9e:d6:8c:c5:df:07:18:19:7e:9b:23:7b:
e6:f4:b7:aa:23:f2:79:bf:8e:e4:c6:ab:b8:2b:1d:
a8:32:0d:03:18:ba:01:e5:2a:e0:4e:25:96:fa:b5:
fa:7a:47:b6:96:61:82:30:c0:12:50:c1:ee:4c:be:
2e:a2:5c:d4:da:52:24:34:7e:2e:6e:c4:4e:8e:5c:
40:ba:e2:a6:c3:81:a8:94:e7:8a:c7:52:00:db:eb:
95:6c:54:ba:4f:df:ba:ac:77:4c:dd:4f:e7:6d:aa:
4f:e9:52:4a:ed:04:e4:df:22:e1:a0:bf:3b:ed:54:
20:61:15:25:ae:5b:77:95:f2:d3:d5:c3:9c:d2:55:
71:bd:4b:66:9a:d7:77:45:ba:ca:69:33:e7:34:30:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:36:16:0B:8C:0C:0C:51:0F:50:81:57:CD:FA:1D:07:16:87:71
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:66:da:04:cd:14:21:ad:a6:54:af:5e:34:e4:f5:fa:3f:2d:
ad:25:8b:00:df:91:99:ca:2e:90:a2:dd:b6:7b:b0:9f:80:f2:
fc:0c:00:a6:a9:07:42:fb:6b:24:83:e9:7a:f8:82:73:f9:f7:
9f:16:4c:a3:a2:83:5e:ee:38:a7:94:d3:0d:74:86:e2:ab:d2:
54:1d:2a:4c:ab:74:e5:d0:1f:b9:64:71:dd:55:9a:e3:70:8b:
94:ce:45:d4:19:1f:e5:2e:30:4b:5c:c7:c1:6d:23:6f:b8:c6:
d5:71:16:ab:c6:6d:4f:a3:2d:04:a1:31:67:6c:b0:e3:f9:be:
e3:68:4b:78:4b:43:e5:b9:94:31:c4:b0:23:fb:ff:6a:29:82:
de:7f:d3:0f:fd:ae:cb:f0:ea:13:20:1e:3c:63:d6:92:4c:41:
41:53:e3:a9:6d:78:cc:cc:02:7f:49:27:36:0a:d0:f8:1c:04:
e6:60:ce:aa:c0:f3:a6:9f:7f:cb:6c:65:33:5a:01:fc:40:a5:
30:f7:28:d9:6c:2e:3a:d5:da:52:0a:73:6d:ba:b4:0f:50:0f:
1b:18:66:79:3c:73:9f:f7:25:fc:ab:29:15:43:64:82:e3:4f:
02:6e:3b:9f:42:b7:17:d6:15:3f:e1:a1:45:c2:d2:db:2d:42:
56:4c:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:31 2025 by rpki-client