Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: f7hyqm1lZRINy7lBPQb/nxdLindHLnlbj9qoncnCu7g=
Subject key identifier: 4F:0D:92:D0:13:76:50:05:49:49:3D:F2:20:B2:38:55:44:58:95:E0
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 0194BD177453B0E92682F2C961C1BC9C6175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: StxrAwrAFn8a4ym85m4fcsssUY6JV4/nE64HvXWTmBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:74:53:b0:e9:26:82:f2:c9:61:c1:bc:9c:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=4f0d92d01376500549493df220b23855445895e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:19:4c:aa:9d:b2:79:30:aa:dd:99:86:57:
79:c2:06:c5:96:97:e9:14:9a:fd:3c:06:b3:ea:37:
04:8d:58:2a:d0:6a:3c:28:47:cf:14:ab:05:eb:8a:
3a:94:9b:31:c1:f2:f8:eb:8d:02:3b:4e:81:4d:0c:
b3:49:f3:c2:92:49:71:1e:89:9b:91:73:23:77:16:
6b:25:1a:b3:05:98:ee:a6:2e:0b:e5:78:c4:de:7e:
a2:3c:09:bd:ee:3b:07:79:fa:98:0e:92:ab:13:87:
ec:bd:ca:77:3e:46:5b:c9:7f:05:5b:6e:43:1e:53:
65:ab:73:14:bc:4f:3e:e2:ec:12:85:dd:9c:35:ec:
79:e7:60:c9:7a:74:68:0e:2c:6c:35:70:4e:4c:1f:
a0:60:f1:84:fe:8e:8d:a7:2a:9c:a1:96:8a:d5:de:
2e:c9:3c:47:b3:98:01:32:ec:1b:8e:67:61:21:47:
be:e6:5a:f6:3b:27:85:d4:5f:b5:54:a5:af:1f:67:
d2:89:ea:a5:ce:78:fe:d3:26:bf:75:2f:e9:32:b5:
87:55:9f:41:55:6a:73:fc:dc:11:83:d6:60:23:f8:
55:62:da:0e:09:03:94:2a:c2:53:45:fc:6f:76:f9:
07:3a:d1:96:ce:8a:35:ed:51:6d:1f:f4:7c:34:9d:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:92:D0:13:76:50:05:49:49:3D:F2:20:B2:38:55:44:58:95:E0
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:ea:0b:da:30:31:f2:eb:5d:e5:8f:88:82:4c:b3:3b:73:
f8:22:11:2b:17:e2:b7:7d:ae:fc:d4:4a:c8:11:58:31:28:56:
21:c2:e9:9e:f2:35:f4:d3:e3:92:ac:a6:0f:f7:2a:24:87:60:
17:ac:33:b4:54:1e:33:f3:e6:0f:ba:6e:b0:9f:b1:28:2c:06:
d6:03:66:e0:2f:65:20:ca:24:7f:36:46:35:41:ef:07:bc:46:
7d:0c:62:71:f3:75:ae:69:a3:d1:2d:ad:cb:0b:36:4f:fd:06:
08:5c:2e:46:46:af:10:40:79:7c:e8:5a:f4:66:75:62:c8:37:
57:09:36:22:84:d9:46:43:ff:ef:79:da:8d:08:99:d2:c6:eb:
38:05:dc:ec:d3:37:6c:b2:ca:6b:db:bc:80:a0:7d:09:2a:ed:
fb:7b:4e:0e:de:d7:50:5b:32:df:38:ff:be:58:4e:7b:8a:a0:
d5:0b:16:a4:fc:e2:bb:b8:08:d9:f8:b8:11:85:c9:78:55:a9:
bd:b4:f4:47:7e:43:70:b0:51:b5:13:d6:10:12:cd:bf:49:9a:
e8:9d:5f:85:dd:22:76:3d:1a:b1:89:d5:dd:69:3a:75:80:f8:
35:45:de:53:15:63:f2:da:26:64:08:04:86:52:52:02:b3:c2:
23:b9:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:17 2025 by rpki-client