Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: yC6JhDpz1dUGGNETJMSd0qUr+FvcJXD4dfGI30NMTn0=
Subject key identifier: 1C:88:09:4A:DA:85:B5:96:BC:E6:D1:CC:3C:50:83:86:C7:90:D0:B7
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 0195E046C27B5DE861AB63D6DE70D7C337CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 59
Signing time: Sat 29 Mar 2025 05:01:28 +0000
Manifest this update: Sat 29 Mar 2025 05:01:28 +0000
Manifest next update: Sun 30 Mar 2025 05:01:28 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: pTYEOB6fJYLpAh1JX8HTBMpUnyd0/9SA8Fpl5Kt+SR0=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:c2:7b:5d:e8:61:ab:63:d6:de:70:d7:c3:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Mar 29 05:01:28 2025 GMT
Not After : Mar 30 05:01:28 2025 GMT
Subject: CN=1c88094ada85b596bce6d1cc3c508386c790d0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:5b:a6:60:0a:f9:8b:9f:e5:0b:46:f4:78:
19:a2:0b:39:eb:38:6f:cc:48:cf:a6:d7:1f:7b:d6:
bd:f3:21:5e:5d:64:17:e2:1a:39:3b:e6:89:bc:b8:
75:5c:44:18:39:05:b9:fd:59:b2:e6:9c:34:37:2a:
3c:45:39:a5:cf:7f:f1:ea:b2:ba:f7:3d:f4:90:85:
e5:cf:60:2f:ae:b4:18:f0:0b:40:68:61:93:a0:3a:
19:83:f2:20:bb:88:6b:df:25:cd:7e:48:8e:37:5d:
ce:9d:87:3b:a8:2c:bf:49:b9:33:df:f1:a8:94:63:
05:6b:0b:b0:f6:89:c7:55:ad:db:4c:88:c2:95:e4:
82:d9:c6:c7:fb:7d:c1:fd:44:89:22:e8:ba:b0:76:
70:9f:14:c0:f3:7b:2b:58:a1:88:a7:41:90:26:a5:
23:87:ff:f0:88:65:ff:cd:42:da:16:c7:f3:6d:3e:
cf:4b:96:6a:11:f9:23:d1:12:9d:01:fe:9b:89:55:
05:51:0f:f3:cc:01:08:82:5b:0d:60:81:0b:92:49:
1a:65:12:55:f1:66:3c:a3:d7:6c:01:66:32:05:06:
30:e1:b6:55:0b:f7:ab:70:1f:d1:3d:c1:f4:58:dd:
d2:87:11:9c:8c:c1:01:08:e9:90:02:1f:4b:7b:50:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:09:4A:DA:85:B5:96:BC:E6:D1:CC:3C:50:83:86:C7:90:D0:B7
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:18:33:a2:2c:1b:af:21:b0:ea:bd:c3:2b:9c:4e:26:0c:
4c:00:3a:59:b0:b8:0f:6f:55:a6:00:a9:09:f9:a9:2e:fb:c6:
30:8f:c6:02:2f:3c:8e:2f:32:05:bf:5e:42:6c:f1:76:22:eb:
4a:2c:0d:52:31:1a:5f:ff:77:46:7d:1d:64:e4:1c:b5:ff:4e:
ee:f3:04:00:98:f4:ae:2d:21:b7:c7:a8:c1:cd:0d:70:7c:17:
ca:73:ef:53:42:cc:5c:b7:fc:71:87:00:77:5d:7c:9e:7b:9a:
87:fc:ec:e4:24:ad:eb:0c:42:5b:57:ef:3e:4c:f5:32:67:9e:
f5:5f:ad:4a:b0:d4:e8:23:65:33:27:3b:81:9b:53:06:8f:a9:
f9:b0:12:8c:a3:82:72:8a:7c:45:ec:78:9a:d8:1a:15:8f:97:
6c:24:9f:c1:0f:b0:59:ce:0f:22:fd:b6:f1:f7:d4:ae:68:45:
15:c5:aa:52:a3:4b:ac:37:99:2e:a4:9a:c2:5a:8a:3f:f8:44:
cf:96:51:61:38:98:d7:69:6b:2d:1b:ff:89:06:7e:e2:22:4f:
2b:9b:1c:23:ba:1d:0b:4f:bd:8b:0a:e8:97:d8:4d:45:36:33:
d8:3d:bf:11:a2:e2:e4:95:be:dd:dd:67:1f:c6:06:e7:81:63:
a1:7f:94:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:16 2025 by rpki-client