Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: eemxhghm2/8fLkzW+sdf08dYI8ajaXojSmevX0EbaoM=
Subject key identifier: D2:A5:24:8C:FD:BE:B0:00:1F:34:87:4F:BA:D5:68:FE:52:22:D0:68
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 0194BC7325ACF46299CE7EC0D24A6EE8CA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: xWexbhHmRFGTWi+SzCFL16bJlrDpa6dwD+trzNa9FdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:ac:f4:62:99:ce:7e:c0:d2:4a:6e:e8:ca:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=d2a5248cfdbeb0001f34874fbad568fe5222d068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:08:e0:b5:80:ad:90:41:61:1d:ec:18:ab:
98:c7:bc:e5:e1:c9:a3:08:10:44:95:ce:68:65:66:
6a:68:df:71:65:fd:db:96:65:dc:3f:60:3c:94:66:
dd:11:ba:72:0d:61:69:39:43:9e:c8:be:ef:9e:80:
77:15:1c:4c:22:88:9f:29:dc:a9:e6:b1:18:c5:ea:
b2:81:07:dc:76:d9:a8:0e:56:f6:b2:ef:aa:14:be:
50:05:96:6b:ba:75:ab:90:ee:19:87:a4:29:32:8b:
ad:5f:30:e0:75:15:9d:7f:05:5e:0d:04:f0:47:d8:
f8:81:53:32:89:90:ca:81:f9:b1:16:e4:03:eb:cd:
66:80:ca:4c:e6:09:b5:bd:d9:22:f3:da:59:34:fa:
49:a0:b4:3d:6f:40:ad:c7:b5:78:f6:c0:88:f5:81:
97:b9:c2:d9:ed:8b:0c:f0:ab:e8:4b:c7:b7:ad:70:
e9:6b:23:e7:ac:74:d3:92:58:9a:25:b5:e1:15:34:
29:a1:93:b0:de:fc:e6:4e:c0:9a:ea:d6:5f:54:56:
7e:5a:bf:95:b9:65:fd:40:34:06:47:5e:0e:66:01:
9b:cf:46:cf:86:28:34:a0:f6:9a:06:b3:df:7f:7e:
bf:f5:4c:75:e3:e7:2a:8d:ae:e1:1b:df:38:34:2e:
5b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:24:8C:FD:BE:B0:00:1F:34:87:4F:BA:D5:68:FE:52:22:D0:68
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:8d:77:e0:b7:2b:5c:68:60:d7:be:19:d7:16:dd:70:30:
21:28:c0:4f:91:ed:da:3f:ba:ed:e5:0d:18:fc:47:3a:37:a2:
a1:8c:78:da:89:b0:1d:74:aa:77:55:14:91:0e:08:c1:0e:34:
19:b6:33:c5:c1:da:a2:6c:8f:0f:9b:6c:25:9e:e0:cf:c0:94:
ef:2c:e5:7f:dd:39:92:43:4a:b2:4d:36:fe:fa:d7:6a:93:40:
c3:b4:19:ca:da:87:ea:52:18:34:9a:18:2c:53:46:99:83:8e:
af:6d:04:5b:cc:d5:3c:01:5e:3d:5c:ef:c8:18:6c:c9:9e:38:
f3:7a:28:9a:59:4b:35:91:f6:dc:52:47:f0:45:21:0e:f8:df:
b0:7f:64:c9:5d:19:1e:05:97:7c:ed:10:ad:5a:93:16:cb:cb:
7e:bb:95:23:73:62:78:20:30:8c:0c:7b:97:af:d0:5e:98:32:
25:2f:6b:2d:1f:56:44:18:e5:74:e8:20:50:7a:4e:c1:2c:bf:
fb:57:7d:9d:f3:67:07:82:6c:20:0d:f7:0b:3d:90:ff:2c:df:
fe:b2:83:f6:48:e4:12:4e:7c:1e:90:40:83:a5:be:6d:99:0d:
46:0f:7f:43:34:e1:0e:94:2c:17:26:51:63:9d:f8:e9:3a:61:
3a:45:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:57 2025 by rpki-client