Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: 6Q+Uimt7FPMFaV1MU2zKVw8a3Q4adRn/VsCOf9p03qs=
Subject key identifier: D9:75:C6:F5:EF:F9:CE:D7:17:D7:37:8A:CC:6F:7D:72:9C:F7:D8:0E
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 0194BC3C3C1504E8FAE5AC9673FAE5ED83AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 05D6
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: a8u17/TBXDBMN9hMw3R/wapPudX9vVuATI2K4HfVaWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3c:15:04:e8:fa:e5:ac:96:73:fa:e5:ed:83:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=d975c6f5eff9ced717d7378acc6f7d729cf7d80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:28:16:ad:c0:41:f1:9f:36:fb:91:5a:25:
9d:a5:19:bb:0b:20:ec:fe:87:75:b4:58:39:4a:f3:
0f:f6:cb:07:07:8e:f1:ff:4e:d5:bc:18:f9:25:48:
ee:f5:94:df:ae:9a:02:00:a5:26:c0:81:5e:65:1f:
97:d0:d6:44:ca:4c:d5:e8:29:c5:e5:14:80:a3:86:
89:8e:6d:36:8e:f9:3c:1f:f9:0a:02:24:dc:26:66:
1f:4f:e0:17:dd:66:7b:d4:fe:29:16:12:6e:b5:46:
4f:f3:be:40:21:1d:75:52:1d:68:5d:3e:ae:a5:96:
e0:cb:53:85:e5:df:fb:04:e4:32:4d:2f:36:5d:5a:
c3:e7:ea:0a:5f:5a:53:50:62:aa:4e:d7:69:e1:92:
81:fa:25:88:2d:16:3b:81:63:60:c7:e2:8e:8a:b5:
19:66:ff:58:ff:68:ee:50:95:f4:c2:ec:c7:9b:ad:
cc:ab:b0:5c:8f:5c:9d:43:c9:b3:ec:b4:5e:0d:28:
f6:b7:ae:0c:99:54:bd:04:07:f3:36:88:d0:1e:35:
48:a1:fb:5b:cf:85:c7:30:bf:06:e2:98:0f:12:16:
9c:ee:05:4a:83:f8:16:e4:a8:17:88:54:77:3d:54:
61:67:c3:cc:27:fa:f7:03:a2:b7:57:c8:8a:7b:fe:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:C6:F5:EF:F9:CE:D7:17:D7:37:8A:CC:6F:7D:72:9C:F7:D8:0E
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:9f:26:07:4f:53:66:a4:a3:c5:f5:a5:c0:d0:75:31:86:
ca:93:e6:00:29:d4:36:54:9c:b0:95:ac:64:c7:90:c0:0b:ab:
05:02:72:fb:07:12:4a:2e:43:3d:58:a6:c6:13:25:84:5f:c8:
04:1c:dd:ab:c1:81:ec:58:7c:d3:92:dd:f9:3e:6b:1b:1f:b1:
d3:09:3e:18:f8:6a:39:a5:b5:85:f7:9b:e8:65:c4:3c:bb:33:
a9:39:d3:75:90:47:ca:29:e9:6f:e7:4a:ec:3b:27:d8:f7:6e:
a1:a3:0b:89:b5:a9:4d:51:9e:f4:c5:68:fd:49:0b:a8:5b:4c:
44:11:c9:2b:af:41:00:58:21:f7:ef:9e:c5:46:bf:87:53:27:
6c:46:0f:4d:97:24:67:3b:6a:6b:0a:a2:eb:3d:66:95:96:c2:
d6:b9:c4:8d:5b:be:76:1d:54:0d:ba:22:9e:02:1b:74:8e:c1:
cd:d7:fb:28:99:e6:7c:ec:67:01:21:96:17:ac:38:62:4b:4a:
d7:60:0b:b0:18:a9:18:79:cb:5a:c0:e9:22:89:3b:3f:71:f0:
4d:b7:f7:7f:87:93:2d:34:03:33:76:ab:0b:56:44:e5:d0:6e:
ab:bc:db:f5:43:e4:ed:dc:7c:47:e8:ab:cf:c6:c3:96:46:d7:
34:ea:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:34 2025 by rpki-client