Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: 2epVIYD8T91CdL5suQCLKzSKCTzYge9+9hpxsv/T1I4=
Subject key identifier: A9:22:2C:C1:94:54:1C:03:F5:DD:40:54:41:53:2B:7A:FC:30:CA:AA
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 0194BC72ED88AA73F79CBFAEA4A058539BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 134E
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: yJuKpEqGtVkASkD/q3f9eIWP4AazAlYcmUp+A4Otcw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:88:aa:73:f7:9c:bf:ae:a4:a0:58:53:9b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=a9222cc194541c03f5dd405441532b7afc30caaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:06:6b:62:a8:fe:bb:55:ac:ef:df:69:23:
29:95:5e:57:69:3f:59:f4:1a:8b:fa:a3:fa:0e:8e:
7c:05:88:17:e4:6a:93:5d:4a:e2:57:8b:d2:db:13:
f8:42:69:18:16:fb:c1:70:ef:55:8f:cd:52:a3:51:
c7:23:df:78:0f:6a:8c:74:94:bf:62:1b:8b:c6:d0:
8a:89:94:b2:ae:12:7f:1c:8f:27:03:3e:21:43:3e:
98:6a:cd:6f:22:34:78:93:56:9e:7e:3f:86:81:dd:
6c:29:61:20:d9:17:a3:11:4f:90:15:d4:66:1e:1c:
0e:aa:56:94:e4:eb:f7:a6:6c:ac:ad:7b:92:35:bf:
d4:77:2f:3a:37:20:36:e4:0a:22:8f:2a:64:12:3e:
a7:c0:79:2f:a0:a2:20:2a:61:e3:5b:cc:ab:04:32:
de:2c:fb:a5:03:5f:17:db:c4:2c:30:d9:0c:f5:da:
24:7d:f9:7d:69:1b:c8:41:5c:cb:40:25:be:9d:f5:
97:d1:b9:8b:6b:8d:a2:bb:58:6f:b2:4d:74:2e:f4:
b5:18:41:2a:87:e2:e1:b9:f7:93:20:95:ff:e9:1c:
32:15:c7:b0:c7:85:42:00:f6:75:37:a8:ad:e8:92:
3b:97:6d:5c:99:6a:37:79:6d:3c:9e:08:11:4f:f4:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:2C:C1:94:54:1C:03:F5:DD:40:54:41:53:2B:7A:FC:30:CA:AA
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:13:ea:65:21:17:9b:40:ef:bc:10:3b:ba:79:dc:ba:d9:
a3:62:10:69:3f:56:d8:f9:30:25:7a:3a:5b:ac:98:ab:df:3a:
ff:d9:29:f5:4b:37:07:22:50:84:48:b4:31:0b:98:8f:ad:31:
55:85:1e:b9:ad:88:54:b3:b7:6c:7d:cd:0a:7e:75:0d:ff:23:
3e:53:ad:2b:01:26:5d:2c:e2:53:fd:b8:62:fb:62:ff:49:d0:
da:ce:41:58:9f:3d:e0:7a:a8:48:94:c4:f0:a6:b9:bc:a3:79:
ef:61:1f:01:88:4f:d8:b7:26:d5:25:b4:d2:07:6b:81:bb:07:
b3:d6:c2:0b:59:94:bf:83:94:be:81:fe:5c:2c:58:1e:70:3e:
24:bc:8b:50:10:05:0a:41:22:52:91:c9:9b:b6:c3:8e:69:86:
db:bd:54:31:d1:1c:dc:7d:87:1c:20:7c:cb:c2:6c:ea:9e:af:
66:12:c1:1c:04:61:e0:e3:c3:40:41:48:f8:80:8a:28:e6:10:
b7:1f:33:e0:3c:96:c6:c5:0e:21:08:b5:d9:77:fb:a4:12:6a:
dd:db:a1:3a:a2:4a:f7:d2:c5:9a:25:6c:cd:d4:dd:c0:21:43:
7d:d7:3c:c2:9f:77:e8:e4:df:f0:d5:18:7a:5f:37:20:1a:71:
42:b7:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client