Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: vz0tiqnq8TVHnCXZjYkmPmhPznp0MJmwo1NH+qEuilM=
Subject key identifier: C4:06:76:F2:10:B2:4C:3D:43:09:76:1F:D3:48:BC:F1:7F:0F:CD:1E
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 0194BD854FB4840C31D1D8B70F94A2C1393D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: YvqumPXdSBUupzn3EHtJFs4lyXK3s/mAQhrNXoL8sa0=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:b4:84:0c:31:d1:d8:b7:0f:94:a2:c1:39:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=c40676f210b24c3d4309761fd348bcf17f0fcd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:c1:f3:26:0d:c9:fd:ef:a7:25:7f:69:c3:
3d:a6:3d:c3:83:25:5c:d8:95:24:18:57:95:e2:e0:
1f:8f:48:73:14:2d:96:2e:0c:35:f3:8f:c3:ca:7b:
86:be:fc:55:67:1d:23:a8:c5:15:d2:67:46:af:2a:
11:28:95:11:a2:15:85:65:0c:5d:3c:30:80:73:8f:
55:b1:eb:97:dc:90:87:b8:3e:f5:db:2b:80:00:f9:
85:fc:f0:f8:6f:4e:f0:57:b3:a1:55:e7:c3:8e:95:
4c:97:6e:1c:20:89:8e:80:4f:6c:32:54:8b:dc:74:
05:aa:b7:4d:66:89:ba:5f:99:64:f0:c7:6a:a7:12:
35:2a:0e:42:47:80:8c:7a:83:92:fc:65:e4:f9:53:
87:ed:3f:80:43:44:c0:a6:52:5c:ca:9f:ef:ee:f5:
8a:4b:67:53:64:03:80:dd:25:f7:f9:31:5a:11:90:
e3:61:ce:84:48:74:a0:e4:e1:ac:a1:c1:9c:3b:a3:
04:87:1c:f2:d5:95:4b:5b:91:da:42:81:ad:d8:83:
0b:b7:ed:16:46:f6:84:dd:12:1f:77:f4:b1:00:65:
93:74:87:cb:a4:70:b8:00:d6:a6:38:b7:52:38:bc:
6a:21:c0:9d:bf:7e:65:3b:1f:ce:94:4f:58:bb:1b:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:76:F2:10:B2:4C:3D:43:09:76:1F:D3:48:BC:F1:7F:0F:CD:1E
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:26:5b:1d:16:7f:1d:df:d9:9a:30:33:a0:01:82:9a:15:46:
d6:15:3d:05:1f:5b:52:35:e9:ff:31:f1:22:c8:d7:57:ef:2a:
18:cb:d2:63:99:97:36:97:76:e9:38:d2:64:0c:60:36:c6:61:
82:77:68:e0:f2:a2:b7:4e:99:31:b1:6e:d9:5c:c5:d8:0a:61:
32:79:8e:6c:60:ee:a4:4c:b3:66:17:ce:87:97:81:03:1f:52:
f3:de:60:d4:14:68:7a:bf:11:33:91:98:03:06:87:7f:03:c2:
60:b3:3f:14:55:f0:a2:81:c9:a5:da:d8:f0:8e:4b:82:01:9e:
1f:f7:e5:33:24:48:fb:93:d9:9c:15:8a:76:e4:f0:5a:fe:d8:
4c:0c:89:a7:0a:a2:77:d7:bb:d3:1a:72:21:bd:1e:e8:31:0e:
4f:cc:0b:41:63:32:d0:53:39:f4:ac:e2:ee:6a:d7:54:8d:be:
16:bb:45:0c:85:fa:25:33:8a:a2:78:91:15:3b:94:55:ee:16:
55:c6:df:81:ad:7d:6d:cc:c7:d6:2a:a6:18:16:94:17:05:b5:
0c:e7:53:5a:ce:50:cf:ab:b2:4d:32:76:7e:b8:70:f7:16:e1:
3e:f4:4f:77:51:41:19:ee:0e:b9:c3:fe:95:77:b4:d3:31:64:
e1:f5:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:12 2025 by rpki-client