Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: NJ4xLVzALYRCuCIhSqqK0cPiyrMcx5ll4f2tCOQrW9Y=
Subject key identifier: B0:7C:BB:68:8F:8B:71:84:41:45:36:E4:BD:BE:F4:05:A8:F2:70:51
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 0194BCE057A83AD3B26FF3C9BA1F9D53171A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0878
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: BVSPc5HUKYEtCLAWFuhtL7OsZwoNs8A0GTbePzzEBrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:57:a8:3a:d3:b2:6f:f3:c9:ba:1f:9d:53:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=b07cbb688f8b7184414536e4bdbef405a8f27051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:5e:a9:ea:76:cd:b3:bf:bd:a4:61:64:1d:
23:1a:b2:ee:7a:cf:8f:a6:21:59:9f:db:64:e3:a7:
48:8d:cc:83:12:e5:4a:ab:26:d5:43:e0:34:bf:40:
91:1f:82:53:8a:15:71:d4:8c:7d:0d:ce:45:13:8f:
80:42:94:cc:4d:a8:7b:91:ce:18:6f:8d:6f:0e:75:
0f:3c:29:67:e7:45:a4:42:df:d7:a1:fb:01:e3:2c:
7e:d7:f4:01:f1:6d:d3:0c:8b:f8:0e:b2:b0:f0:b6:
99:1d:d8:29:97:21:d8:c8:d0:8a:b8:cf:8f:01:93:
11:39:35:6e:bd:89:09:e8:1c:e0:fc:93:d5:6d:5b:
de:a4:b9:3c:61:f9:a1:03:8e:4a:80:18:9a:dc:8d:
60:f9:db:a0:ed:fe:f9:6d:9b:a1:fc:c7:84:96:23:
24:40:4a:2e:82:ea:ee:3d:ab:06:ab:6b:19:91:70:
79:8d:76:2a:4b:34:aa:d2:38:32:f7:20:3a:ea:cb:
56:62:26:81:ac:61:44:ed:af:21:fb:47:d5:45:f1:
89:9f:d8:cd:e4:71:2c:f3:93:55:26:18:b6:9d:a8:
4f:c5:0f:55:b2:06:8d:23:16:f2:02:8a:5b:52:8a:
75:82:89:b6:c0:1b:10:a6:fe:45:0d:6b:eb:c8:0a:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:BB:68:8F:8B:71:84:41:45:36:E4:BD:BE:F4:05:A8:F2:70:51
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b8:4a:fe:54:69:63:e0:b2:52:7d:ea:1d:6c:0d:e6:c6:26:
c7:26:08:28:74:8e:95:32:ba:75:a1:08:a0:64:0d:42:c2:7f:
d8:bd:4e:a7:63:c7:92:c7:3c:28:eb:7e:06:89:d3:1e:ea:bb:
fd:4e:98:c1:bc:d0:35:38:3a:5b:7c:c2:18:ee:bc:97:a5:6c:
13:12:ce:a7:9c:ba:00:77:8d:d2:f4:c0:58:56:e0:3b:fc:a7:
f3:79:38:0b:cb:03:50:53:4d:d0:ef:e7:b1:3f:ab:09:50:a8:
86:76:99:6e:08:56:b8:d6:9e:28:4d:a9:10:9b:cc:43:e4:e5:
33:2d:39:8a:86:c8:21:ef:f4:d4:18:57:5c:3b:24:a4:96:8c:
36:5f:a2:e6:56:50:ae:fc:b9:07:44:8f:ff:d7:4d:4f:60:c5:
9b:a2:3c:73:c3:3c:f7:7d:b7:03:83:6d:8e:83:94:ac:31:66:
9a:a1:b1:e9:07:47:80:f7:29:c5:04:22:af:f9:e3:a8:d1:45:
5f:b9:2e:c2:68:79:5e:cc:1a:ea:1d:16:ee:e6:50:8d:0e:7e:
c9:4d:95:19:05:bb:b7:1d:6b:03:5c:91:a8:4e:fc:c2:a5:bf:
c4:61:a2:d8:7b:88:ed:2e:1c:61:12:ea:af:5e:d1:f1:35:10:
49:a5:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:28 2025 by rpki-client