Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: tsEnGfBsmkr8iG3aBVE2e7Ou0DTnEYsZFlsRcM2sMsk=
Subject key identifier: 14:B5:57:DB:C1:EA:07:1C:3B:E2:35:02:A1:85:7F:37:DA:4C:14:F7
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 0194BCA9D1F4A830DFBA9979D8C098D24E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: P6bhQzqAITb3lkf8PiSR6jKv3urAbYELxzHXpV8Mu+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d1:f4:a8:30:df:ba:99:79:d8:c0:98:d2:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=14b557dbc1ea071c3be23502a1857f37da4c14f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:ac:fc:b2:6c:c8:23:02:0e:3f:42:21:8f:
3b:cc:8e:52:71:d6:c2:e0:06:da:d4:9f:7e:59:14:
83:c8:0c:00:87:c1:8e:c7:e8:85:55:fd:1b:69:57:
f5:0b:e2:e6:52:b4:e5:f6:b8:ab:95:38:b1:37:2f:
a2:5f:f5:00:f8:a9:be:31:4f:cd:cc:e2:8c:e3:06:
6f:21:3c:5e:4c:75:65:0a:ce:a9:21:c5:84:d1:08:
f9:75:c3:1d:27:fb:d8:c6:4b:2a:9b:83:bc:1f:af:
b5:78:71:0c:bf:3e:5b:f5:06:77:e7:76:e7:29:02:
2e:0a:c0:e7:5b:24:71:6e:7b:3c:99:d7:a9:99:5b:
59:e4:30:51:8d:48:f7:ac:86:27:2e:be:bb:66:93:
65:27:25:87:d9:57:da:3c:5d:9c:26:4e:aa:8e:fa:
39:f4:d0:88:96:12:eb:4b:4b:dd:eb:91:77:4d:85:
4d:f3:ee:e8:28:45:47:13:fa:e1:b3:a8:0c:8e:7f:
0a:04:c5:67:2d:8a:88:ff:0c:92:d9:1d:73:dd:13:
f7:35:cf:99:25:25:4c:91:7a:28:c5:3b:19:10:1f:
17:a4:57:4d:be:34:7f:5a:00:5d:aa:20:96:61:0f:
7b:8b:60:75:13:bb:92:e7:55:12:c4:fc:f0:67:bc:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:57:DB:C1:EA:07:1C:3B:E2:35:02:A1:85:7F:37:DA:4C:14:F7
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2e:b9:4e:70:fb:da:7d:fa:2a:b3:b3:73:1b:67:3b:4a:6c:
87:38:ca:a6:05:20:4f:cd:55:fe:26:d9:bf:56:9b:75:06:69:
e9:86:d3:3f:11:47:b6:62:ed:b9:a3:1e:2f:f1:17:f2:ff:0d:
a1:3a:1d:72:45:c7:64:de:8d:a1:a8:e8:1f:48:4e:8d:17:11:
12:08:84:30:b8:58:25:8b:f9:8d:ff:f0:3b:c4:b6:38:8e:e6:
b1:81:12:f4:06:eb:59:21:f4:ee:75:77:65:54:e0:2b:29:ee:
08:c9:65:47:e6:8e:e0:77:23:f7:ff:9b:3c:a5:ed:c7:39:c7:
cf:b1:09:6c:d2:61:ff:ba:2a:dc:8d:82:65:9a:64:20:c4:9e:
1d:8b:41:76:44:8e:3b:56:21:af:0c:b5:3c:b9:3c:ef:31:7c:
8e:c5:ff:1f:c3:b9:9b:48:d9:e2:38:eb:c7:27:e4:fe:49:a6:
c0:87:5c:d4:c9:c5:ae:06:fe:67:f3:d4:28:4b:28:a8:1e:02:
d0:b3:e6:46:39:aa:06:fa:93:8c:03:0f:91:ac:c5:dd:13:18:
04:e4:68:cb:fd:77:a4:60:64:07:7d:85:96:03:84:a7:fe:f9:
a6:80:27:4c:d2:74:c8:13:35:28:c7:9f:e6:4d:7c:9d:f3:a2:
96:55:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:23 2025 by rpki-client