Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: /UIGC7AHm9nAbnv+q7c60dTmL/dLvRXdpYs7wByFB3o=
Subject key identifier: 30:B0:5F:3E:18:FA:2F:D4:D7:37:08:9E:94:6A:3C:C1:51:71:3D:DC
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 0195E1222860E84B0A617220DD8C2921A08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 13B3
Signing time: Sat 29 Mar 2025 09:01:06 +0000
Manifest this update: Sat 29 Mar 2025 09:01:06 +0000
Manifest next update: Sun 30 Mar 2025 09:01:06 +0000
Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: /jeH96SO2Qbr26lHrW4T3WRMm/oTkuIZwOM1PwrEDtE=)
2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=)
3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:28:60:e8:4b:0a:61:72:20:dd:8c:29:21:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Mar 29 09:01:06 2025 GMT
Not After : Mar 30 09:01:06 2025 GMT
Subject: CN=30b05f3e18fa2fd4d737089e946a3cc151713ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:76:19:da:85:26:1e:85:f9:9a:dd:74:f8:
bd:9d:5b:e8:b8:36:ae:1e:8b:f9:84:ce:38:db:6e:
59:d8:b0:0c:c4:0a:be:57:d4:27:27:94:dc:5d:61:
c3:d0:63:ff:0f:fb:d3:a2:96:e6:c7:90:ef:17:72:
69:98:22:d0:80:ca:45:68:eb:04:38:4d:ca:19:33:
6c:b7:ee:64:66:05:c5:40:f2:9c:cf:df:1d:e7:c9:
da:e9:f0:9b:cc:ea:3c:e8:aa:02:35:99:ed:80:50:
63:21:83:24:cd:ab:4b:a3:49:43:e2:02:f3:d2:d6:
d1:d1:a3:f4:dc:c8:a9:9c:b3:eb:df:e7:7e:34:2f:
ca:d9:c6:75:f8:ce:6c:77:5b:d5:4e:e0:84:81:0c:
89:de:ff:ce:ae:98:34:73:1d:cd:86:20:87:5d:53:
7c:5e:7e:51:e2:f7:a3:fd:93:e7:60:30:81:a5:47:
fc:7d:07:1c:3b:db:a6:49:56:b8:e9:a4:0f:7b:29:
72:a1:eb:df:c2:6b:d3:62:cd:e8:7d:63:87:55:2d:
e8:2a:14:ac:27:be:1c:4f:e1:da:ad:48:12:a3:30:
8b:a7:db:14:0f:c3:c3:2b:2f:15:20:0b:80:0a:67:
4c:9f:70:e2:4e:4b:19:59:9c:23:f3:65:3f:50:65:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:5F:3E:18:FA:2F:D4:D7:37:08:9E:94:6A:3C:C1:51:71:3D:DC
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:0d:45:a0:9a:e7:f3:a6:6e:3a:99:2f:f0:9c:b9:eb:a5:
cb:82:9a:8c:ff:75:26:01:70:7a:c7:5f:bf:fd:0f:43:72:ff:
9c:01:bd:c2:8a:c5:dc:2f:1c:79:67:06:be:7e:7c:42:f7:d4:
97:b0:ff:68:07:95:78:f2:a4:7a:da:68:2d:94:dc:e6:ce:d7:
67:3b:5b:88:3a:c5:63:52:b5:81:e6:46:1b:ca:71:24:d9:27:
10:ab:a6:57:46:81:a6:c9:ad:82:03:25:96:30:55:c5:ba:0a:
f8:f0:5e:44:39:8d:cb:29:8f:37:82:c6:b0:3c:e9:61:65:17:
48:45:99:3e:21:54:f4:62:cd:59:b9:45:11:a4:0e:aa:cd:8f:
1f:d8:ba:06:97:77:5b:8a:70:2e:30:fa:5a:9c:59:fb:81:8b:
39:a8:e1:66:4f:cd:2c:98:73:93:ba:6e:72:54:87:de:6a:b2:
8b:71:f0:b7:c7:a9:7e:a5:be:75:ac:3b:45:06:77:81:7c:45:
99:af:7f:7b:3c:42:ad:e5:65:04:9d:d7:11:7c:de:13:c2:2c:
91:58:92:d5:86:8b:2f:91:7d:eb:af:83:38:62:7b:17:74:4f:
67:e1:1b:24:1e:b9:3a:13:bd:e2:d7:55:d4:ee:90:9e:3d:17:
82:ac:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:46 2025 by rpki-client