Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
File: DxgybgAap_xW-DUxMVN2-equCYg.mft (raw, json)
Hash identifier: 91xK5xr9UaMjL5hzqaL+MQSFkLnTflDI8N1cRgqCMgQ=
Subject key identifier: A8:3C:B9:6C:3F:9C:98:4F:21:4A:8E:6A:68:C6:F5:51:D9:CA:6E:FD
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 0194BCA9A2F9B923B0682946E8E9299199A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
Manifest number: 06A1
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: DxgybgAap_xW-DUxMVN2-equCYg.crl (hash: K1bUZLCF+F5EEZQmzB1ngTolG6glhewbvg+ZBYynG9k=)
2: IAritswAhqNQe77s1GDg_ezpHck.roa (hash: ILdWDEHhnQvuxpeMgx2XCbjW7CQm2ybVgtMQih2P4NU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:f9:b9:23:b0:68:29:46:e8:e9:29:91:99:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=a83cb96c3f9c984f214a8e6a68c6f551d9ca6efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:64:b0:44:ff:c9:f0:6a:d2:80:4b:54:6e:
04:f5:87:64:9a:83:95:25:09:1f:10:c5:37:be:80:
fc:13:56:c8:a0:21:5a:a0:1e:52:81:84:0e:c4:f3:
86:e4:b3:22:a2:47:97:19:d2:44:3c:96:a5:30:09:
99:12:14:03:dd:23:62:3d:9a:c2:49:4e:3e:cc:9e:
4a:4b:d5:5e:4f:29:52:02:64:5e:6b:56:ee:72:a0:
ac:8b:f2:d8:65:07:f5:22:5b:f8:fb:de:d4:02:6c:
0d:10:e1:fd:bc:cc:0b:14:29:0b:22:80:2c:6e:82:
e0:9d:97:6b:ec:21:05:c5:e6:12:e7:7e:ac:d1:ba:
8f:c2:2e:f8:cc:a2:e5:5b:60:4a:9f:d1:ec:ba:ec:
04:39:2a:77:bb:19:2b:90:4f:30:51:6d:59:17:af:
00:59:f7:56:ad:d6:7c:29:7b:c1:87:1f:63:f8:5f:
64:28:ed:df:07:51:71:05:46:e2:7d:66:93:ae:d1:
ab:0b:36:64:7c:08:26:05:dc:af:ce:f4:5f:99:47:
51:08:3f:50:01:95:2f:c3:96:fe:2f:4c:b3:ff:67:
ba:a2:d4:19:fa:c8:d4:05:06:c9:a0:21:9f:c7:43:
6a:2f:3d:1d:38:93:a7:4e:29:81:55:6a:79:b4:60:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:B9:6C:3F:9C:98:4F:21:4A:8E:6A:68:C6:F5:51:D9:CA:6E:FD
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f2:37:42:1d:ba:b3:86:e5:53:4f:62:42:77:2b:1a:dc:88:
1d:e6:74:93:10:9c:66:47:8d:4a:bb:1a:76:e3:37:86:6e:af:
ee:f5:8f:97:37:04:af:fc:c4:41:2a:1a:9b:c2:64:e0:c7:53:
ce:f4:79:c6:da:ac:ff:26:a0:8b:a0:a7:58:4b:3e:d6:11:37:
e9:32:19:4d:db:8f:b0:a5:55:1f:3c:8f:f4:33:02:c3:38:96:
b9:a3:91:e3:13:1d:2b:28:de:3e:95:72:f3:68:b6:f6:16:01:
17:67:f0:a2:ed:c6:36:80:1a:09:6b:e8:24:dd:18:ea:cd:e8:
c8:ff:62:16:3a:42:9f:78:b0:60:9b:1a:d4:1e:12:97:e0:09:
df:01:64:f7:c7:21:db:32:96:ee:f5:eb:fd:62:bf:db:bc:b4:
97:4d:fb:ac:ff:b8:3c:79:4b:d3:90:68:60:8f:eb:bf:4a:03:
4e:fc:f8:2f:6c:a5:78:bc:b1:2b:d7:32:8e:30:a4:0d:f6:28:
b6:1d:e0:87:6a:60:9d:0b:cb:2b:ea:03:73:8b:b8:39:be:20:
a5:56:f0:f5:f5:e0:cb:86:6a:80:d3:90:20:d5:e2:83:48:b3:
eb:d9:8c:10:36:2f:a3:86:0f:1f:10:79:d4:bb:d4:f8:f7:93:
da:9f:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:25 2025 by rpki-client