Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: 2WCFneCtlkQkZzkQUn49tgGUEr6aoR9X9iy5ualbdAk=
Subject key identifier: 25:C8:8A:ED:95:FA:51:20:76:C4:F1:DB:BF:FB:28:B4:F9:41:DD:96
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 0195E0EB7C31BB41C1DB13F9A48F980E3332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 0BEA
Signing time: Sat 29 Mar 2025 08:01:23 +0000
Manifest this update: Sat 29 Mar 2025 08:01:23 +0000
Manifest next update: Sun 30 Mar 2025 08:01:23 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: MOkA7mffLqZUWkbK1fMRx5jwKsmYADwnEdjpW6l+Eq0=)
2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:7c:31:bb:41:c1:db:13:f9:a4:8f:98:0e:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Mar 29 08:01:23 2025 GMT
Not After : Mar 30 08:01:23 2025 GMT
Subject: CN=25c88aed95fa512076c4f1dbbffb28b4f941dd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:71:e9:b6:b1:ac:50:2c:10:bf:15:5b:55:42:
77:3f:ac:66:4f:c8:a4:6c:41:ba:75:80:6e:42:cf:
74:28:6d:31:06:56:3e:67:85:1c:82:d8:72:31:ba:
f6:a0:d6:8e:00:67:d6:79:1d:a9:1f:d6:3c:38:04:
42:de:1e:1c:8e:a8:51:ed:71:d1:b5:25:ad:3a:ba:
3c:5f:73:69:79:11:17:49:76:c8:05:e0:06:41:f9:
fd:4e:f0:0a:32:26:96:62:69:be:58:77:c1:5b:18:
24:5d:f4:c8:16:72:bd:c9:d8:02:35:48:bb:22:66:
72:03:ca:b1:bf:c9:e1:ee:80:bb:13:2c:47:d4:53:
8d:18:f2:d9:ca:e1:2c:f6:50:14:7d:83:d7:0f:f6:
62:7c:91:da:4c:a3:ea:85:9a:08:bf:79:8e:55:33:
56:35:4e:d2:20:f3:d3:da:65:e3:db:97:65:80:e7:
1e:55:30:6e:58:15:88:c6:6f:2a:ce:a8:b9:e8:67:
6d:0f:05:68:62:fb:20:77:00:2a:cf:3c:d2:c7:62:
8b:d4:26:e9:37:76:ed:5d:d8:28:b2:89:38:13:ac:
5e:27:f6:96:70:b8:b2:ab:0b:a6:f6:46:ff:7d:6d:
67:05:ac:81:30:3b:fc:cc:c1:14:ed:c1:af:61:74:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:8A:ED:95:FA:51:20:76:C4:F1:DB:BF:FB:28:B4:F9:41:DD:96
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:5c:dc:b5:32:e6:f5:58:83:92:99:e2:cb:fc:3f:88:49:
0c:7c:53:99:d1:b3:e0:6c:3b:f2:a1:50:fc:7f:1d:32:99:21:
37:30:f3:2a:e7:23:5c:6e:2e:14:81:f6:5c:b2:27:c4:d9:0c:
a8:57:c7:68:b3:66:5d:66:53:ab:4f:e7:37:24:72:ee:8b:00:
ed:a2:01:3a:b0:ee:a9:b9:5c:7f:3d:76:89:d3:79:25:cb:00:
25:9b:83:48:0f:5f:6d:7d:ba:58:f6:48:66:bb:95:09:19:45:
5d:07:d5:08:c5:6c:61:d4:a2:c4:c0:69:7a:57:f5:5b:69:02:
f4:cf:68:f4:a6:8d:a4:f8:61:de:ab:8c:28:75:89:6e:1e:cc:
8b:c0:c3:cb:dc:4d:ca:06:12:a5:4f:1f:90:5b:cc:a7:cc:39:
73:2b:a6:ec:3a:87:a9:3b:5b:73:9a:7b:8f:40:ad:d6:28:32:
9f:85:dd:d7:05:4d:db:fb:af:b1:af:66:bf:73:a5:75:26:dc:
a6:04:62:17:39:de:d9:42:65:0d:6f:28:62:76:28:64:1c:1b:
f5:b7:0a:12:e0:03:a9:c6:b8:9b:48:a2:c1:81:0f:9f:03:8f:
f3:ce:7b:74:76:d4:a2:94:13:f6:6c:af:b8:1a:d2:9d:e7:36:
2b:02:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:28 2025 by rpki-client