Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
File: dBjDbQQYIfhrONMiPUP-XNsgEaA.mft (raw, json)
Hash identifier: kyNHUPqy4cPxVkOWfP5HXuj+fsCd/DXcVTS0nmDjqAs=
Subject key identifier: 43:55:D8:4F:55:18:2B:C3:31:0A:F0:15:31:1F:92:43:54:13:34:33
Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Certificate serial: 0194BBCE37A2C693DB0A34C43F46193C2FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
Manifest number: 0726
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: dBjDbQQYIfhrONMiPUP-XNsgEaA.crl (hash: PXFCrCax3cljvKADOsw3Ro4OPIbMoBgUDCmj3gzuIEQ=)
2: fckG1hreaQ8xP9aJJKEUiJVYbO4.roa (hash: H/fpzZgWfyhKP6Q91nDD52iN8W1nvip6ZLK/KybKJsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:a2:c6:93:db:0a:34:c4:3f:46:19:3c:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=4355d84f55182bc3310af015311f924354133433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:60:2f:9d:17:ce:12:bc:e9:b4:c2:1e:9b:
fe:bb:a5:6e:ab:c1:2e:bc:c4:b9:c8:95:45:f4:0f:
8f:24:09:c7:c1:57:7a:9f:36:c6:01:f0:56:b6:7e:
99:a7:3b:f2:19:82:5b:2b:80:87:21:01:7a:1a:8e:
d8:09:f4:0d:a4:f9:45:ff:bd:71:3e:22:6e:e8:0c:
dc:b4:fa:b9:1d:45:6b:53:68:26:3e:78:a3:ce:e2:
1b:a8:77:ee:d3:a2:ee:e1:25:30:ee:63:8d:62:90:
5b:fa:79:93:b5:8c:4c:78:eb:e6:a6:ce:6a:8a:0e:
9d:00:23:58:b0:72:d6:47:73:40:74:0f:f1:a9:e5:
bc:6c:6f:1d:29:c4:56:32:a1:4e:e3:95:03:87:0b:
ee:ae:b2:77:ca:c5:80:58:df:eb:4a:c5:16:be:2f:
52:4d:13:2c:12:1b:c1:64:5d:ad:37:f4:00:99:86:
c5:6b:d4:74:3b:8c:df:8d:34:16:8a:1a:26:75:9e:
05:3e:7a:8b:bb:cd:0e:62:3f:1f:89:44:77:28:ce:
21:7f:af:09:da:65:4f:d0:1f:37:b9:4d:2a:13:11:
ef:ae:d9:13:84:09:23:a6:84:ac:67:c2:43:de:aa:
ec:b2:48:fe:ca:12:49:d6:5c:cc:de:93:a1:1d:05:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:D8:4F:55:18:2B:C3:31:0A:F0:15:31:1F:92:43:54:13:34:33
X509v3 Authority Key Identifier:
keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:20:e3:65:f5:12:33:e7:06:f2:05:83:40:b1:f9:61:2b:65:
d1:ac:b3:ca:6e:11:a9:f0:e5:82:3f:b2:de:82:a3:e4:04:e9:
6e:19:44:4b:54:e3:2f:11:73:9a:20:fe:e5:6b:0c:b2:a2:e0:
22:8f:31:b9:ec:76:6f:b3:4c:72:af:bd:8e:7c:c7:65:d3:20:
49:de:2f:e3:6b:ac:a5:5f:9f:e5:bd:1c:d5:8b:5a:d2:b3:fa:
08:af:2a:16:16:69:d6:33:20:bd:75:7b:41:a3:a2:53:b7:ef:
9c:ff:38:6f:b8:95:d5:db:e1:51:f4:1e:55:a4:5b:8b:ff:a5:
f6:80:5b:89:63:e4:11:51:45:cf:b8:59:61:38:78:8a:73:b4:
8b:bb:f5:d0:20:e3:e0:ef:d4:21:94:d1:f4:bf:93:00:01:aa:
a9:25:bf:ee:65:78:f5:e5:11:c2:e2:d2:3d:07:16:3c:34:e8:
c8:19:b0:df:45:79:34:70:c1:66:33:eb:3d:04:a7:5d:83:39:
2b:77:86:e5:45:09:92:5b:b9:81:da:1a:1c:d1:a0:73:03:af:
17:c4:5f:13:8c:f5:63:c8:dc:92:c9:8a:ca:c0:db:1f:72:ac:
4a:ab:f4:0e:00:db:19:03:ee:6d:d0:57:e0:73:2b:73:b5:63:
59:47:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:14 2025 by rpki-client