Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: bTzhImJ0ViNqeo5Yg8/kdNZ8RAJEVwUq4nsBdkR/vjM=
Subject key identifier: 02:41:51:7E:4C:E0:F4:81:90:A6:FC:F3:9B:AC:DE:09:95:A9:71:11
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 0194BD178C122A9E7C2F91BE72F8F50AD8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: CzLNCWkvJe7UuLNFW8a0iJYBeLQMt7OuH/xQws6IaA0=)
2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8c:12:2a:9e:7c:2f:91:be:72:f8:f5:0a:d8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=0241517e4ce0f48190a6fcf39bacde0995a97111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:32:eb:30:11:13:0e:f1:1e:9d:e5:75:df:
3e:84:8f:16:65:c1:1f:e6:02:21:54:24:6c:e9:3b:
55:54:b8:19:92:6d:db:97:41:98:b3:78:99:ce:4c:
f6:2c:c8:d6:e6:a3:f3:0e:0a:84:4d:e1:d6:e1:0d:
0c:29:b1:ec:13:3a:ae:12:25:09:73:5a:23:1a:5a:
0c:53:36:b0:cb:6a:0c:61:ef:97:e3:80:78:62:02:
e8:1b:de:68:c9:cc:d7:93:a1:1c:d0:ac:5a:e1:86:
b6:91:b9:54:87:06:22:54:6f:54:35:6e:6c:da:4e:
12:4c:f3:79:4f:30:cf:90:6f:19:03:cd:cb:1d:9f:
a8:66:95:28:88:fa:39:0b:47:74:b5:72:0a:62:86:
af:19:a9:c6:96:03:7a:73:72:20:62:e8:df:bc:c9:
f1:7e:28:0c:1a:8a:22:88:77:34:0c:78:85:dc:d2:
9d:9e:70:62:63:d0:59:dd:e8:47:e5:13:7d:fa:d7:
ea:f0:b6:fa:fe:b1:fe:e8:c0:c8:44:4d:a5:be:ef:
e4:c8:1b:8c:1a:5f:dd:b9:2d:c6:49:10:9e:31:fe:
a4:fc:8c:aa:5f:41:45:f1:4f:4a:2d:26:f3:6a:01:
0f:77:20:9f:76:6e:f9:a6:05:7d:a7:a9:5c:9c:df:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:51:7E:4C:E0:F4:81:90:A6:FC:F3:9B:AC:DE:09:95:A9:71:11
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bb:c0:64:fe:a6:54:16:75:3e:9c:71:25:45:00:ad:40:de:
23:e0:30:6f:95:52:39:52:9d:31:aa:b3:91:48:7d:3c:6a:ac:
f5:7e:86:03:d6:7c:2e:c9:35:1e:b1:c1:94:ba:6a:75:12:be:
78:0d:fc:95:0c:4b:61:06:80:7e:36:06:4d:38:cf:5e:26:d0:
2e:a1:8b:16:12:d5:64:2d:2a:1e:8b:9a:55:f6:c0:df:9e:73:
47:1d:53:ba:b9:69:dd:07:37:82:e0:76:b8:7d:b2:b5:34:51:
a3:eb:4b:a3:a4:90:7e:ac:ae:43:d0:62:ac:86:84:c7:cd:d9:
d6:cc:24:ea:e4:6b:d7:6d:3b:d4:53:7b:42:29:06:17:4f:f5:
c2:59:81:da:59:be:2e:4c:98:0d:79:aa:9f:fe:93:43:0d:0f:
c2:1a:6f:52:e5:89:bc:db:2a:2b:36:7c:d8:5b:55:18:8c:10:
16:bd:c4:19:fc:d4:14:13:14:9f:57:b2:1b:81:ab:aa:91:d0:
81:e0:93:da:49:2d:13:47:17:4d:49:02:dc:a6:85:78:ee:01:
eb:80:e9:dc:53:b5:a9:2c:63:2f:7f:2d:d0:8c:aa:3b:e5:94:
36:1f:10:b0:b4:04:53:6f:93:ed:c0:3b:da:99:84:24:08:7c:
4a:14:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:22 2025 by rpki-client