Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: 6bLXc/PF6xmUJjfvWV52RwkYIM6+Cy2m/d7qVTJdvhg=
Subject key identifier: 7B:CD:A8:81:A7:88:A8:40:B0:28:A9:C8:95:EF:A2:F4:30:E3:D3:D8
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 0195E1221D0193D4005BEC4C3C4C527D0F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0C04
Signing time: Sat 29 Mar 2025 09:01:04 +0000
Manifest this update: Sat 29 Mar 2025 09:01:04 +0000
Manifest next update: Sun 30 Mar 2025 09:01:04 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: /UhSoquyxe/E50n0UGLzFi14W9TWWKvq7/YNWoKs0Lw=)
2: 6MpCaf0UOBYn8TQkxejiZakptqM.roa (hash: ng/NGbK8yrrWtQu9zhuJZevZ0uFrzLg7FL/FvO6/2MU=)
3: VEU2Xx_W7oXurM3BP9vIKZCMG4o.roa (hash: o9K/DHxqI5B4HDKoeQx+W7Rwvv3Sj+2t3qcauvi8Xig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:1d:01:93:d4:00:5b:ec:4c:3c:4c:52:7d:0f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Mar 29 09:01:04 2025 GMT
Not After : Mar 30 09:01:04 2025 GMT
Subject: CN=7bcda881a788a840b028a9c895efa2f430e3d3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:6b:0c:21:0a:a1:8f:77:48:5d:76:1a:cc:
c5:4d:e8:d1:50:93:0c:c4:30:4b:4b:e8:82:1e:77:
61:d5:fe:f3:07:d1:9a:88:7e:6f:76:37:f1:b2:81:
aa:44:3d:e0:f9:23:af:be:d7:e3:11:20:a5:79:04:
07:89:b8:0f:3e:bf:91:d5:f5:c0:c9:2d:b2:12:0e:
91:13:b4:0a:aa:a0:e4:58:14:21:f4:52:84:71:a8:
88:f0:c3:80:a4:f9:b6:4f:f2:bc:7e:72:5a:11:05:
2b:2a:9e:d1:80:57:91:8f:6f:03:01:eb:93:ba:26:
cc:39:33:d1:32:59:13:b0:28:c1:dc:7a:9e:53:f8:
16:05:32:22:5d:75:ee:ae:4a:a0:f6:9b:55:55:a5:
b4:2f:ea:7c:da:cd:66:dd:63:10:9d:b1:75:4c:f8:
9b:e1:20:a4:e4:83:04:9f:1d:68:68:6a:e7:d8:41:
1e:58:a0:72:9f:d8:c6:f5:24:15:d5:b9:98:75:0f:
80:d8:62:59:d9:37:0a:bf:c1:f8:07:f7:31:01:df:
da:98:94:33:80:94:5f:79:58:0c:4b:39:26:07:02:
53:f5:c3:35:fb:1f:3e:15:29:a3:e7:73:4a:fc:64:
4b:47:99:32:e8:4e:f2:d2:79:84:e5:4b:3b:d5:97:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:A8:81:A7:88:A8:40:B0:28:A9:C8:95:EF:A2:F4:30:E3:D3:D8
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a9:95:ac:b0:85:d0:5d:dd:c8:a5:87:47:de:08:d3:83:24:
f3:96:97:4e:d5:5c:36:86:db:67:8f:8a:31:9f:14:10:5a:b1:
0e:d3:20:d4:2b:bd:ce:90:ec:54:3e:b0:95:1f:a4:d3:b9:bb:
6d:9c:43:d2:6b:52:22:14:f1:f8:be:e3:36:26:56:d3:36:65:
ac:b5:b4:8b:08:e7:f5:63:4f:b5:5f:f8:e7:75:dc:ad:ea:e8:
53:1c:fe:75:e0:e4:43:eb:65:11:7e:62:69:7e:d6:80:15:a1:
c9:4e:c4:4c:85:02:2d:02:f0:5d:57:94:95:22:cd:27:a0:87:
7c:b8:42:8e:60:0c:9b:2c:36:99:82:a9:4a:8d:29:50:ca:8f:
b8:f9:2c:32:56:5f:da:6e:48:9f:53:b8:90:36:ee:99:d1:95:
bc:ba:da:9d:4e:1b:43:c9:a5:a9:ee:dc:4a:be:98:dc:9f:72:
72:2d:dc:02:11:c2:a6:bb:d4:54:13:fc:e7:a6:7f:f0:c4:27:
c7:81:32:37:33:1e:df:e5:72:f2:d2:27:4f:07:a0:ab:71:ef:
1c:1f:ca:3c:3b:ea:ab:04:4d:e2:f3:f2:4f:4c:8d:a4:7b:cf:
54:53:5e:bf:d8:bb:8a:2b:91:a6:fe:40:5a:33:07:40:85:af:
67:81:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:21 2025 by rpki-client