Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
File: dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft (raw, json)
Hash identifier: cedNsrPymEnrApSPigSeCHZFbVOsh9a2tOt9YEap/YY=
Subject key identifier: D2:46:7C:9A:FD:88:91:99:D1:B3:71:A1:33:9C:50:68:20:CF:B1:E4
Authority key identifier: 74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
Certificate issuer: /CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Certificate serial: 0194BCE0DFB15CD044B9E65E3B1CB5588486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: WQ4j1_yKqIXJF1IuI-LnS3sUpac.roa (hash: EWYzKqknIGgk4UuBxG0kxoiWyc4t1/vTDmYxSeebInE=)
2: dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl (hash: eHe0FF1gs1t2IhlQCHnpH06OO0waGyOwg7uJkrxZ2QA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:b1:5c:d0:44:b9:e6:5e:3b:1c:b5:58:84:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=d2467c9afd889199d1b371a1339c506820cfb1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:36:10:8c:01:db:2e:dd:1b:c9:00:70:35:
ae:02:07:8a:13:9a:ff:36:61:39:fe:cb:cb:8a:46:
84:d4:d0:46:5a:6f:da:2d:97:f3:a9:d8:ec:de:f3:
c5:56:57:a3:b7:30:40:c6:de:1c:58:e0:99:55:e7:
db:45:7c:7d:d2:78:2c:2e:f7:c9:e4:9e:3b:ea:55:
da:36:39:6b:84:94:37:be:09:90:43:8d:72:ad:d6:
77:f8:14:c9:a9:e0:bb:40:10:80:a9:4e:37:54:ff:
92:91:39:e2:cc:17:a5:c6:11:90:2e:3c:fe:0d:56:
52:6c:8b:8e:8d:fd:77:d8:68:66:6b:74:0d:a8:2b:
ef:cc:ad:31:af:55:71:5a:6b:8c:a9:1e:96:de:ea:
8c:d1:e6:f7:9b:75:3a:ad:be:5e:df:f0:d1:cd:8d:
5b:8f:36:14:59:97:6d:70:d3:15:fd:32:02:32:83:
25:49:77:ca:10:63:c5:c8:5c:5a:4b:33:34:bf:22:
a3:57:aa:e4:75:ba:f2:53:dc:a3:df:b2:e6:7e:6c:
e8:8c:6d:2b:43:dc:f2:73:81:7c:9d:d5:0e:75:21:
5b:31:04:83:4e:6e:a3:a1:9d:d2:19:09:10:bf:00:
cb:b9:c4:78:55:ec:31:d1:c6:b5:c9:39:7f:95:67:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:7C:9A:FD:88:91:99:D1:B3:71:A1:33:9C:50:68:20:CF:B1:E4
X509v3 Authority Key Identifier:
keyid:74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:29:e3:3b:40:d5:49:6e:a0:0c:0b:76:f5:ee:c1:52:e2:8a:
6d:b8:25:9d:d8:2b:47:aa:5a:49:39:fc:14:e8:c1:55:26:6e:
14:c0:2b:d4:c0:df:da:72:ec:f8:a0:90:e6:2d:e4:50:06:6d:
dc:e4:18:72:16:13:cf:2a:c6:fd:57:9c:d9:7f:8e:33:47:fe:
d9:a0:f7:65:87:a1:41:3f:47:4e:80:97:cb:e2:9f:2e:63:98:
54:6a:2d:e3:e8:18:2a:21:e5:f8:38:3d:bf:77:5c:01:7d:96:
7c:eb:1d:14:19:c5:cc:93:08:37:0a:d8:b6:55:da:10:d1:5e:
be:c5:d4:f7:c7:92:bd:e9:7c:1c:79:ad:7f:25:f1:ba:79:03:
5b:4b:eb:ef:9d:b9:5c:8a:dc:19:9e:f8:37:e2:69:c3:2b:23:
25:e0:cd:16:f3:b6:da:3b:f4:fd:f1:40:7f:65:28:0b:73:8d:
02:2d:07:88:72:c6:75:5b:92:de:32:1f:2f:7a:b3:2b:d4:4f:
09:fd:7a:ca:cf:54:6b:86:ba:2e:82:63:2b:a1:96:e1:c6:41:
27:30:2e:c2:b1:5b:ea:fb:fb:40:38:af:f4:4d:e5:86:e8:06:
f5:84:be:ba:ce:14:d2:bf:c2:12:bc:95:05:ee:e2:91:6c:20:
b4:b0:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:46 2025 by rpki-client