Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: 9Skk5BII3jzb7dgaB9xHIkjKfHIT5RLffJKzw+N+Ks4=
Subject key identifier: 85:3F:0C:37:CA:C6:6F:A0:99:29:50:72:DB:96:2A:F6:56:4B:15:9A
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 0194BD858BE8C4279216F4BE92105489D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: nLthO7ke+PtUxLHUvI5WVWMCY5mK3MZJZBMWd33iMQA=)
2: aT0CVuxGpAWCZRs37r9FhsfI5jc.roa (hash: 1I9hKylkwvyudsmG/eCfRN1ARD0ICRcCIn5ggjRwZmk=)
3: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:e8:c4:27:92:16:f4:be:92:10:54:89:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=853f0c37cac66fa099295072db962af6564b159a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:01:e9:66:e3:83:02:b3:07:8a:77:f1:51:
ca:df:68:a3:b0:a3:f8:13:00:31:9e:06:49:37:df:
a1:df:5f:9a:cc:df:06:c0:79:37:55:b3:40:20:06:
96:73:4e:32:26:bb:f4:c1:4f:2a:fb:f0:f9:66:45:
ef:d4:84:b0:05:e1:14:b4:3d:29:d9:72:22:10:1d:
8c:09:5c:38:3f:6c:a7:2f:a0:67:ef:82:b1:13:92:
0a:ec:a0:63:eb:c5:8b:ea:e0:9c:80:58:3d:a1:81:
49:eb:31:06:60:78:2e:e6:35:87:b9:38:9b:79:11:
20:92:1b:f5:61:dc:f1:a7:83:5a:28:95:e1:d8:f4:
0c:a8:bb:90:99:b8:57:c3:6b:c9:b1:e6:6e:97:c7:
b3:36:9d:d3:4e:5d:84:c2:ff:8c:72:76:3f:4e:59:
fc:0a:4f:80:58:08:53:12:db:d9:b8:e2:31:95:05:
c0:02:56:d9:c2:d8:76:db:96:1c:29:3f:0d:70:d9:
e6:50:09:b8:97:25:12:19:36:14:d3:e1:ec:23:8d:
a9:d2:cd:a4:5d:17:f1:6b:30:c8:f2:2c:0e:c1:23:
49:e4:22:12:01:2e:10:1c:09:35:f6:1d:75:6d:c8:
8b:dc:0d:53:fc:0a:26:64:08:e5:76:8c:ef:ac:73:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:0C:37:CA:C6:6F:A0:99:29:50:72:DB:96:2A:F6:56:4B:15:9A
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:62:4b:d0:0c:08:90:40:98:eb:e1:60:9d:17:d2:85:30:3c:
0a:3c:02:1b:05:b2:8a:35:a0:c8:7f:67:c6:68:af:e4:45:ad:
69:c4:18:8e:ad:a4:1e:fe:96:5e:52:de:68:5f:49:95:c5:a9:
80:ac:9c:c2:65:5c:3a:60:65:41:3a:95:65:d2:14:6e:60:7d:
32:27:77:40:70:0c:0a:fd:6c:8f:77:c9:fa:69:be:ca:40:26:
02:b8:62:0f:6c:ae:d0:14:e9:9b:44:8f:6c:64:cd:ec:86:d8:
ff:2c:0c:24:e4:7b:f0:bd:12:1b:b0:f1:99:09:05:f8:76:05:
ad:57:82:72:fc:57:d5:69:b4:83:06:a8:b1:b5:6a:41:e4:18:
30:5d:1a:70:8d:c9:a8:bd:90:67:c3:05:08:a0:51:8f:9e:dd:
78:c6:e5:a0:4a:ff:f5:3f:63:08:c0:03:ed:7c:0a:21:dd:6f:
7e:6d:3b:e1:0c:34:f8:15:4e:33:76:b6:63:b5:6d:7d:0f:d0:
ea:b7:80:a3:97:d5:26:b9:88:78:13:55:f3:fe:5a:62:f5:f3:
a4:ef:65:2f:4b:bb:dc:c9:55:a6:79:41:7f:b4:bd:21:69:dd:
0e:78:bd:1b:84:93:00:6d:80:4f:7d:33:27:e1:2b:df:19:dc:
42:c4:4a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:58 2025 by rpki-client