Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json)
Hash identifier: J2C5o51f4tgpksLViaE6QevYHSwN7T+NEwhp4pZr0YE=
Subject key identifier: FC:74:EE:00:05:65:06:D1:58:F9:73:8A:13:6F:57:1C:42:D8:51:0E
Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Certificate serial: 0195E1221D5D6420C3276640F0806AB8B82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 09:01:04 +0000
Manifest this update: Sat 29 Mar 2025 09:01:04 +0000
Manifest next update: Sun 30 Mar 2025 09:01:04 +0000
Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=)
2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: uptWkuSrqYV5jx804BFYN0/ok/zg3Ytg7IBjMz+4sq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:1d:5d:64:20:c3:27:66:40:f0:80:6a:b8:b8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db
Validity
Not Before: Mar 29 09:01:04 2025 GMT
Not After : Mar 30 09:01:04 2025 GMT
Subject: CN=fc74ee00056506d158f9738a136f571c42d8510e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:52:51:af:2e:68:61:99:af:fc:48:cc:7d:
ef:f6:d3:e3:3c:43:64:43:a3:1d:60:22:14:21:97:
cf:c7:18:63:1e:21:43:cf:11:83:5a:67:95:27:b1:
f7:74:c4:88:e6:9d:8f:63:ed:41:2e:41:be:a8:95:
2f:78:bd:65:aa:01:75:a0:b0:f9:a0:9e:42:7a:49:
1e:c9:ff:5a:58:ad:fa:f8:fd:01:42:d3:95:67:90:
e1:d1:16:bc:f4:b0:13:fe:69:34:df:f4:10:f1:f4:
33:21:8f:6d:73:62:c4:f7:89:d3:3e:15:51:6a:7a:
79:23:5b:42:bd:8c:16:08:b6:13:be:9e:07:f4:9a:
5d:48:51:2d:c9:5b:82:e3:6a:f8:b5:6e:47:3f:b4:
d0:87:c6:b3:74:28:c5:da:75:6c:23:41:3b:84:34:
2d:2f:a9:a3:8a:5a:47:bb:67:c7:af:f0:b9:20:e1:
36:8b:1c:e8:d9:d3:26:ae:cf:2c:88:9d:5b:d3:9a:
e2:1d:ec:cf:da:e2:2e:e8:5b:36:77:7e:18:65:44:
3e:38:3a:86:b9:f6:4e:07:86:4c:98:64:d9:1d:f4:
f1:f2:05:82:e5:b0:c5:52:fd:d0:36:3e:5d:d9:a3:
83:b7:ea:af:89:eb:5a:d7:66:f5:65:c5:d0:ef:12:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:74:EE:00:05:65:06:D1:58:F9:73:8A:13:6F:57:1C:42:D8:51:0E
X509v3 Authority Key Identifier:
keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1f:5d:85:55:a0:c1:09:47:8c:7c:9d:79:6e:75:d2:b9:78:
d1:d0:64:0f:33:cf:6c:8e:ff:04:96:8a:57:bf:63:ac:59:cc:
66:83:88:63:07:66:38:1c:34:bc:24:1f:e3:7f:e3:72:a9:3d:
e8:0e:5d:e2:4b:88:61:74:a7:cb:ec:23:2a:04:a7:10:d7:9a:
2e:45:1a:91:f1:1e:f2:0e:e8:bd:bd:ea:da:25:51:6d:03:c3:
af:f7:fe:9b:90:c5:5e:7b:6e:90:7f:1f:65:c1:8a:32:e1:e2:
fb:21:bc:14:bf:0b:45:d1:4d:b7:dc:79:28:bb:1f:f2:bb:a8:
9f:95:8f:65:05:ca:93:46:7f:f3:7b:db:e4:43:d4:35:a9:0d:
7a:53:b5:44:54:e5:b9:21:a0:c4:9a:7d:97:e2:6e:70:2f:97:
f7:35:5a:07:1f:03:63:d4:6d:a8:71:88:46:eb:be:f5:fd:1f:
e6:09:fc:9c:4b:87:4d:25:2a:27:68:87:07:bc:ad:88:ff:1c:
d1:74:00:08:89:cb:be:05:49:59:1b:2b:70:af:11:d6:d4:02:
a9:b5:14:ce:7e:1c:3c:16:89:08:0a:25:21:83:6f:7c:d7:39:
80:94:04:f9:bd:6b:7c:10:c9:fa:eb:dd:96:b9:de:46:8c:fe:
59:fd:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:05:23 2025 by rpki-client