Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.mft
File: Duy2GK3XCEZ_d02T4mdAdpk-zVQ.mft (raw, json)
Hash identifier: xEaaZ0SviFh/251zHEiKg77MVNqxaT4JN/VDOrZ/6jA=
Subject key identifier: DE:8E:F0:90:89:AB:53:4F:11:F6:88:36:2C:63:D6:A0:3D:0B:22:D3
Authority key identifier: 0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
Certificate issuer: /CN=0eecb618add708467f774d93e2674076993ecd54
Certificate serial: 018E3556216B32C1A64F267A234490457859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.mft
Manifest number: 0E45
Signing time: Wed 13 Mar 2024 01:03:40 +0000
Manifest this update: Wed 13 Mar 2024 01:03:40 +0000
Manifest next update: Thu 14 Mar 2024 01:03:40 +0000
Files and hashes: 1: Duy2GK3XCEZ_d02T4mdAdpk-zVQ.crl (hash: 9nFvRdtUZAXh6Gy+ONaRA9inzgEYFltPMCulermxMXg=)
2: bUBxFG9mcYcGYMR4pKYLiu1U5oY.roa (hash: WzalD2p1K0yD8hv+vhJxG+1YnYw5igPdv3VI6hW/r+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:35:56:21:6b:32:c1:a6:4f:26:7a:23:44:90:45:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eecb618add708467f774d93e2674076993ecd54
Validity
Not Before: Mar 13 01:03:40 2024 GMT
Not After : Mar 14 01:03:40 2024 GMT
Subject: CN=de8ef09089ab534f11f688362c63d6a03d0b22d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:81:7d:2d:9d:35:4e:a6:09:3d:c3:64:47:
41:7a:3b:4a:0c:28:7a:f5:6b:fe:c2:5f:5d:ca:db:
2b:03:1b:d3:26:62:b6:82:bf:76:95:ff:08:bf:6e:
8e:f0:3e:c2:d0:61:ff:73:4f:62:cb:1d:fe:a7:19:
82:be:6f:e8:a3:17:57:ec:0a:ad:09:c3:7c:09:48:
8b:99:45:f9:c4:ce:9b:74:6d:3c:67:d1:61:6d:27:
f0:a7:8b:e4:5d:aa:fa:64:aa:3b:ba:e1:fa:e5:01:
1f:79:b6:40:c8:da:03:c1:ea:44:36:54:84:3e:8d:
91:3b:5f:f6:f5:b0:d6:a0:9c:66:b3:3f:4b:42:4a:
db:fe:69:48:2b:1b:df:93:5a:49:9c:9a:bd:50:84:
3e:82:58:ce:c4:81:de:3a:4c:04:3d:08:6d:ef:8d:
e8:9a:c8:16:3e:02:e9:45:67:f8:c6:15:f8:74:96:
0f:ba:c3:8e:9b:1b:82:2d:74:54:0f:c3:79:56:91:
ca:22:07:fc:41:5f:e3:24:64:7b:bf:02:57:80:b8:
31:2d:5e:6b:5e:3c:2c:27:b6:58:2a:e7:13:d8:97:
b8:e0:8c:90:5d:45:a5:58:39:48:9a:a3:88:0a:de:
3b:83:e3:d4:6c:04:27:c1:eb:49:5e:20:64:1d:b7:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8E:F0:90:89:AB:53:4F:11:F6:88:36:2C:63:D6:A0:3D:0B:22:D3
X509v3 Authority Key Identifier:
keyid:0E:EC:B6:18:AD:D7:08:46:7F:77:4D:93:E2:67:40:76:99:3E:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/428db9-a1a4-4f5d-a411-df29d618d660/1/Duy2GK3XCEZ_d02T4mdAdpk-zVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3f:df:f7:e7:eb:94:8b:4e:f4:2f:7b:8f:5c:78:84:d9:06:
11:d8:9c:78:3b:1d:56:78:a4:ea:be:ae:be:9a:a8:46:40:68:
a9:b7:44:cf:32:38:48:bd:a3:5f:ee:84:79:64:f9:17:c1:ee:
a5:b8:21:19:08:8c:8b:e5:9a:d6:37:44:2d:88:cd:01:7d:d7:
11:4c:fd:1d:4a:48:42:b5:d9:2b:8a:7c:b8:8b:7b:ef:93:36:
5d:80:82:d5:f6:60:da:5d:f6:41:e3:f4:0b:b5:8e:cc:af:69:
08:db:8f:de:5c:f5:bc:b6:e7:10:10:02:61:65:b3:bf:29:82:
6b:e2:58:3d:63:ef:1a:2f:08:f4:0f:22:ca:0c:18:cf:0c:e3:
e3:bd:68:c2:23:72:21:cb:ab:ff:8f:6e:8c:1e:cf:4e:87:af:
23:8a:9c:ed:60:35:ec:e0:3e:7b:33:d0:36:d8:6f:ab:ec:f6:
5a:a4:60:2c:34:d3:4a:f1:11:fb:c5:7d:94:72:7e:07:fd:41:
81:1d:af:8c:d1:21:c5:35:ba:bd:1a:69:3b:f1:d0:ec:86:c8:
94:ec:4d:b8:c6:02:59:5d:26:5a:13:f8:1f:23:6b:9a:26:26:
e6:f2:d1:3a:6e:c5:65:87:80:a5:ce:5b:b4:eb:09:52:bc:20:
92:a3:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:43 2025 by rpki-client