Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: G2O7P2hByfFhxwj6Y/l6F0WKmVk6oF3DpLqnQkXDz1E=
Subject key identifier: EB:06:88:41:54:F7:54:DA:5C:AC:8A:D5:2B:B7:9E:89:D5:84:D7:C3
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 0195E00FCF5C8D0B7C3A60E3167D0720D943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 13B0
Signing time: Sat 29 Mar 2025 04:01:27 +0000
Manifest this update: Sat 29 Mar 2025 04:01:27 +0000
Manifest next update: Sun 30 Mar 2025 04:01:27 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: Em2zNtIGenTi3FP1A+cqLhDbHZxB/lTPxC6EcMKRQYU=)
2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:cf:5c:8d:0b:7c:3a:60:e3:16:7d:07:20:d9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Mar 29 04:01:27 2025 GMT
Not After : Mar 30 04:01:27 2025 GMT
Subject: CN=eb06884154f754da5cac8ad52bb79e89d584d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:6e:fb:e7:f2:ac:e2:73:93:c6:7c:cc:9a:
d4:86:45:63:b9:75:3f:3a:60:a3:96:ed:77:1b:75:
1d:13:bd:4f:06:07:47:d7:9b:22:b5:9c:e8:c8:ca:
65:0c:05:1d:09:cb:65:7c:8a:06:49:16:68:ae:50:
d7:73:8e:d1:08:ad:89:2d:24:29:02:92:50:8a:fe:
ff:e2:f5:14:cf:ac:f6:ab:aa:06:5e:01:e0:06:9f:
b4:be:d4:c7:a7:a5:b8:b3:7c:67:eb:07:9a:1a:7d:
5d:e4:b4:aa:2e:c2:24:ca:68:a3:de:c9:d2:69:5c:
5f:12:fb:5d:bf:be:1a:23:60:47:8c:28:d1:08:0c:
53:7f:b6:8d:1f:ff:d3:a3:c1:ce:a2:e2:32:af:b6:
83:9e:4e:e9:26:40:2c:51:c2:31:fb:b6:8a:86:1b:
c3:2e:19:70:91:50:1c:51:a9:5c:42:5d:2d:6f:11:
a2:91:eb:de:96:11:33:aa:6e:1a:96:24:2a:06:ac:
5a:1f:08:8a:a9:02:2a:96:2e:1d:f7:a2:29:6d:2f:
61:53:e2:e9:2b:26:ea:9c:6e:25:e1:62:cf:76:f9:
dc:f2:97:60:90:a3:6f:15:4a:a7:5d:e6:17:1a:44:
a2:4d:6d:78:f2:21:4b:d5:f8:0d:df:85:72:e4:24:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:88:41:54:F7:54:DA:5C:AC:8A:D5:2B:B7:9E:89:D5:84:D7:C3
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:08:30:29:40:39:2d:67:3c:ef:dc:26:83:65:7e:26:a8:41:
17:b1:9b:35:a8:7f:44:7d:33:ee:61:e9:33:ce:7b:de:e0:b7:
01:8e:d3:a7:20:ff:cc:df:6e:db:e1:bf:66:2e:7e:85:76:77:
e2:9b:fc:cf:35:17:e9:32:0f:f3:0c:05:7e:6c:78:94:c8:eb:
33:cf:7f:66:3a:3c:07:47:cb:42:3f:40:04:31:1f:91:48:88:
6d:ab:da:ee:b8:e3:81:34:82:2c:8f:69:66:7f:a5:f9:b7:5f:
99:6b:04:c9:84:4a:a7:bd:cb:3c:71:3f:c1:e0:8e:50:a5:8e:
df:9e:76:8a:82:98:04:41:6a:07:f0:60:a8:d5:ed:fd:c8:e9:
02:87:7c:ea:4c:0c:d8:7b:91:59:f4:92:36:47:a2:02:fc:02:
1a:17:0f:ce:3a:e5:d5:ef:ed:cf:e1:42:79:07:13:29:07:5d:
34:84:98:0e:bb:72:ac:7e:e5:b5:75:7f:65:2e:3d:67:07:6c:
1e:a2:28:b9:bb:20:69:bd:39:3f:6a:b6:34:b4:36:6f:6c:8b:
0b:87:d4:0f:4f:96:e9:2d:72:e1:ab:55:84:7f:c4:b1:42:db:
2e:0c:99:10:38:e1:74:14:de:06:7a:24:f7:99:7f:ec:67:94:
5a:be:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:30 2025 by rpki-client