Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier: 0xfkcR75PIteNLNCLIwPYagTMX337WWZHzE1Axcv+M0=
Subject key identifier: 70:5B:86:10:24:76:33:5D:C7:3F:1F:93:43:46:F4:E8:C6:4F:E4:60
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 0194BD17E32D4C31788B70A84059CA476B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: o5e9azK9SuaRNfFOzOCNTx2u7lN4gQ1VLtRkbSRpfsM=)
2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e3:2d:4c:31:78:8b:70:a8:40:59:ca:47:6b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=705b86102476335dc73f1f934346f4e8c64fe460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:18:6f:21:23:02:42:a8:a3:58:2d:a3:a4:
46:ce:e0:5e:d9:04:1f:e6:52:5d:6e:d9:42:5b:69:
d6:c7:7b:38:20:c7:22:25:42:4b:49:25:e9:06:2e:
9b:0b:4d:28:73:61:1b:7a:fa:ca:c9:1e:50:72:6e:
6d:67:b0:2b:15:e0:ab:e5:d6:f9:b5:cc:5f:3e:1f:
6f:34:1e:a3:51:a7:d3:bb:62:5c:5c:be:25:77:f9:
58:ec:35:5c:58:75:77:64:53:87:f3:be:81:48:44:
66:6b:c1:1e:56:c6:13:52:66:6f:b4:75:32:f2:51:
df:b4:02:e5:15:17:de:49:5e:b5:3b:06:2c:68:35:
cd:f1:91:00:c8:25:5c:65:cd:25:68:00:e4:ea:6e:
20:7d:fb:ea:c1:67:59:71:a0:2d:21:42:2b:06:e1:
4b:00:14:f3:aa:87:d9:59:00:19:0a:57:95:6b:38:
8e:74:1b:00:17:ad:6b:7a:22:2e:0e:09:8e:e7:f4:
b7:f1:fb:60:f1:f3:b5:83:51:cf:c5:8f:b9:69:c8:
cd:bb:6c:1b:a9:6f:64:4f:21:4b:a9:a9:1c:3a:1c:
76:34:9d:81:a1:d6:8c:ec:da:0d:34:a1:b0:29:74:
b5:dd:1c:7e:6f:13:1f:06:70:55:e6:8d:19:88:db:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:86:10:24:76:33:5D:C7:3F:1F:93:43:46:F4:E8:C6:4F:E4:60
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:36:de:9f:26:c0:85:22:12:fc:05:0b:a9:93:59:ed:67:b5:
9b:dc:68:af:35:2a:bf:a8:6d:1c:81:cb:f6:43:a2:4d:c7:c3:
d7:bf:24:22:8c:7e:b8:c8:37:fb:b8:d1:de:5d:74:c8:ed:52:
11:9e:8f:f2:01:1a:c3:2d:d3:ed:15:b0:8c:67:25:5b:95:32:
c3:8f:6c:5e:57:9b:7b:d5:72:81:0f:08:c2:0d:10:c8:8d:75:
62:7b:29:0f:7e:21:4e:4c:0b:00:39:b4:6d:8f:67:73:74:26:
39:60:99:b2:b3:a3:04:63:9b:6b:2a:c0:d8:f2:f1:63:55:c5:
ba:6a:b0:d7:6b:51:35:97:fd:6b:54:42:83:f5:fc:84:5b:db:
9e:61:14:5f:43:3e:5f:62:8e:37:06:2e:cb:d1:c2:36:5c:5c:
e4:e6:2a:35:37:b1:80:b2:b8:59:b5:82:ca:5f:3c:ba:5f:da:
e9:c6:e7:20:1e:58:c3:ca:b8:2d:87:a2:ac:11:c4:1e:6f:06:
42:16:ec:df:38:f6:06:13:c4:e6:93:9f:b8:db:50:96:c5:bd:
5e:b7:14:4d:00:39:02:fe:17:52:d1:62:2c:c9:73:7e:95:e2:
e9:31:e5:10:95:62:db:84:cf:cc:20:70:cd:1e:6e:cd:c6:54:
68:1f:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client