Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: Jd60LiMtzHwi9lzXNkNODR5A4WM60lkGqgoCkO7KWeA=
Subject key identifier: D6:37:B1:D8:DD:C9:BF:5D:3E:FB:77:65:49:60:87:B4:27:F7:B1:4C
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0195E159D9F8ABA8E973FDFD64534B5AF7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 1322
Signing time: Sat 29 Mar 2025 10:01:56 +0000
Manifest this update: Sat 29 Mar 2025 10:01:56 +0000
Manifest next update: Sun 30 Mar 2025 10:01:56 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: 3bgqaxqvnCCqCXIVHwshgRGjtY2C0TAFGxZPMv0pItM=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:d9:f8:ab:a8:e9:73:fd:fd:64:53:4b:5a:f7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Mar 29 10:01:56 2025 GMT
Not After : Mar 30 10:01:56 2025 GMT
Subject: CN=d637b1d8ddc9bf5d3efb7765496087b427f7b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:d1:57:ef:e6:bf:2d:02:44:bb:1f:9d:09:
a9:07:53:e7:94:fb:05:04:87:42:d5:e1:47:4c:48:
fd:59:61:db:ad:48:f7:24:e8:6a:bd:91:9e:5b:f2:
fe:e9:ea:26:cd:73:c1:33:02:9e:c3:98:ef:e9:91:
2d:ac:f4:e3:05:16:a0:4c:29:89:83:c9:2c:da:8a:
b4:39:c5:ca:b8:23:ee:af:19:b5:c1:d4:5a:2a:aa:
f7:61:2c:5a:0e:8f:d8:04:67:b6:95:b4:b9:3a:76:
31:c3:36:1d:3f:3c:55:74:bc:30:0b:1d:41:44:95:
8f:34:08:75:a0:67:ac:7c:dc:f8:17:20:14:9d:3b:
2a:ef:a3:9d:ff:27:fb:3d:72:f3:e2:16:9a:9e:34:
87:56:65:72:fa:0c:9a:05:58:3e:a7:a3:88:4c:f5:
76:ec:61:d6:8a:45:19:44:57:38:3e:90:54:a3:0f:
57:71:44:4b:82:e0:8c:35:56:58:25:a1:3e:44:81:
fb:f9:a3:88:b1:7e:8d:f8:92:15:3f:33:be:20:3e:
ae:25:01:90:62:93:98:87:e5:21:8d:dd:49:2b:f8:
f4:78:8e:f3:18:3f:34:3c:cc:61:f6:f3:94:e6:57:
42:d8:43:bb:c1:66:66:fc:68:c3:19:40:56:b6:9a:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:B1:D8:DD:C9:BF:5D:3E:FB:77:65:49:60:87:B4:27:F7:B1:4C
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:85:fa:ed:7b:ca:15:2b:fe:30:c9:16:7a:84:41:2b:06:
d4:ab:e2:b0:7a:4f:d5:fc:f2:c3:ca:96:d3:90:5c:b6:fe:4e:
6d:1a:cd:d4:8f:a9:c4:25:99:a3:36:86:28:a5:3f:aa:44:72:
38:e7:38:2b:de:9e:1e:ca:d2:9d:c3:74:2a:0c:7f:61:57:89:
d2:5c:f0:bc:26:31:22:cf:14:62:2c:ac:a6:c7:d2:be:2c:8c:
a9:55:d9:58:44:2a:bb:9a:fd:37:5f:f4:e9:29:8b:98:09:86:
31:6c:c4:7a:e0:ee:b8:95:71:3e:1a:4d:36:84:04:60:9b:0c:
b0:c5:7a:49:83:ef:6d:e7:85:b9:0f:9e:74:b5:85:72:10:df:
ba:0c:80:57:3b:9a:42:8f:15:dd:76:c2:ec:a1:39:1f:1c:78:
93:7f:a4:72:9a:ca:99:82:9e:78:ca:f1:d9:06:83:47:6b:75:
bf:e4:38:2a:74:ec:fd:f5:a3:f8:ad:da:8b:af:ad:0c:17:e8:
78:34:7c:2d:3f:6c:83:ac:a2:3f:df:05:db:0b:92:52:0d:78:
f5:df:b8:2e:f3:79:74:49:54:a0:37:71:c5:aa:d9:71:9d:c7:
2e:bb:25:e8:01:35:c8:3b:f1:a1:61:f5:3a:5c:65:d5:8d:bd:
96:25:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:19 2025 by rpki-client