Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: FxFjrra5jRtJkh606oexf8sMC7zn0RkTzOXK7q3IB1E=
Subject key identifier: 8A:72:04:78:08:21:BC:A6:C6:E6:8B:F2:F3:E0:03:B8:70:93:47:A2
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 0194BBCE2BC58A7EDF67E3DA329E44AEFC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 0104
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: J0BZiLbMjcdlqrd9IoydysOhEcIoPa5Ei3QacRvP2LM=)
2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:c5:8a:7e:df:67:e3:da:32:9e:44:ae:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=8a7204780821bca6c6e68bf2f3e003b8709347a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:18:4e:d4:8d:9e:97:f4:ab:97:3e:79:ab:30:
f9:69:f6:f3:f8:39:6c:fd:cd:e2:ad:49:4e:22:d7:
e3:e8:94:46:34:3d:71:ef:6f:cb:05:e3:0d:5e:e1:
99:bf:6b:16:91:8c:5e:1d:4d:3b:c7:c9:27:26:8f:
b4:58:d5:e3:2c:e3:83:79:f1:67:e1:79:11:db:55:
d3:87:d8:9e:b4:ae:67:35:e4:f7:cd:15:7c:ce:02:
ae:57:bb:b1:eb:cb:36:e1:83:5b:69:fd:8a:d6:a4:
f7:7f:87:10:23:4b:6a:12:28:e2:ca:17:2b:1a:6b:
6f:9c:f7:7d:e7:d8:2e:5c:4c:e6:3f:7f:32:9b:e2:
01:2c:ae:5e:02:59:ac:4c:d6:18:9e:42:38:de:1e:
8f:35:e4:93:52:cd:51:a1:64:58:4d:ee:1e:13:f0:
3e:e8:ee:4f:9e:56:4a:89:c9:1e:9f:13:c4:ba:2c:
23:1a:f2:82:c5:4b:1c:5f:c7:19:97:cc:af:0d:09:
54:fb:3b:34:06:41:4f:a1:64:97:bd:70:02:59:71:
29:dd:5d:f1:84:65:8a:08:0a:00:f7:6b:59:24:1b:
c7:46:13:dc:1c:ac:bc:f2:51:34:54:a0:8a:b7:d4:
1a:0c:75:c2:55:18:04:7d:2d:a4:ff:14:2e:a3:2e:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:04:78:08:21:BC:A6:C6:E6:8B:F2:F3:E0:03:B8:70:93:47:A2
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d3:68:5e:42:c9:a5:18:60:f2:49:49:44:27:1b:0d:50:a3:
78:f7:bd:ec:80:97:ab:98:a8:71:a1:99:1e:5a:d8:bd:91:a1:
83:2b:a5:3a:7e:8a:ba:99:5d:10:3e:a2:3a:fa:77:8a:03:39:
af:8d:01:d9:66:ee:07:b8:a2:85:67:c3:77:45:3b:30:72:94:
10:65:68:7a:0a:d8:b9:87:d6:7f:bd:44:10:45:42:a1:6d:e6:
a4:57:ee:13:31:1f:18:f7:f1:2e:02:9f:22:6c:4b:1a:be:81:
bb:89:bd:09:88:d4:9a:05:1f:f0:41:8a:0f:67:50:e5:84:d8:
bf:e1:e3:39:c3:f1:0f:58:76:9e:9d:55:98:63:ae:7e:75:06:
c7:68:1d:47:47:a0:6b:63:dd:3d:ce:02:88:4e:8d:6d:00:94:
3f:be:60:86:b1:64:a6:e5:3d:a7:03:40:e9:21:bb:c1:f0:60:
2b:2c:83:93:4c:8c:c8:70:ae:aa:2d:9b:17:e7:19:55:7c:aa:
5b:fe:82:cf:9b:88:63:36:9d:3d:b6:cd:6a:26:36:8a:28:19:
7b:21:69:a8:ee:be:33:5c:32:4b:4a:c7:8d:37:72:85:2f:3d:
03:2c:e2:3e:16:3c:69:e0:f8:7d:6c:7e:54:6e:8b:f9:2f:ea:
67:09:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:53 2025 by rpki-client