Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
File: 26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json)
Hash identifier: Ng00wdgnE3VYD2rHUOjuKm07H1I6WVNS5p1/VCEhV8Q=
Subject key identifier: 84:70:F0:7C:8B:60:60:57:6C:31:9E:EC:F5:0C:5B:FA:F5:1B:D7:A2
Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
Certificate issuer: /CN=dba1240555d86c8dbde836edd164cd328fae63b5
Certificate serial: 0194BC3C236729D70B0430D1F9401F9DACEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
Manifest number: A3
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: bOdRILhskp+OrJdufukyfGZTUsZkyguWsuJqTVNqHpo=)
2: UjW7yWELLZ4wmIBJun9f47O3M5s.roa (hash: BN8elBK909fGWcFpTeqxq0IE/blqpykN7942105/TNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:67:29:d7:0b:04:30:d1:f9:40:1f:9d:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=8470f07c8b6060576c319eecf50c5bfaf51bd7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:3f:17:a0:35:c9:16:b9:ea:96:ed:3f:6b:
60:00:02:7c:af:09:46:44:d7:2f:74:02:36:56:07:
c2:59:e9:ea:32:42:3a:83:ee:e5:ad:b8:a5:11:f4:
03:0a:e2:3e:16:77:5a:8d:fc:97:0f:78:d1:7e:e8:
f3:51:ce:f1:99:65:06:13:e8:ae:4f:9f:f5:ad:3f:
9e:98:3f:a1:56:f7:df:f2:b2:a2:7e:f3:20:4b:b6:
d6:40:e6:70:94:2a:d9:89:99:f7:38:aa:a8:34:44:
04:04:8b:03:b9:1e:45:c2:b6:ca:1a:23:0c:2f:b4:
96:8f:4b:bb:dc:c4:11:77:8a:7e:5d:37:5e:2e:73:
c1:98:cf:3e:fb:5a:29:f1:db:98:94:b9:e9:99:a1:
8c:da:99:68:aa:41:14:03:3d:80:35:32:2e:cc:f9:
70:98:d4:d2:56:9b:cb:28:4a:56:72:ea:05:72:63:
8e:19:8e:21:78:cf:8f:e9:9f:03:91:88:78:c3:f3:
70:0e:e1:0d:71:b8:1e:28:29:35:35:97:75:ae:f1:
20:d8:21:41:8a:ee:03:ac:4a:03:6a:98:a4:c4:dd:
37:62:72:c7:d3:01:e2:73:79:5d:9f:92:7e:99:03:
53:d5:aa:8d:c3:2c:3d:f5:7b:af:c6:f7:de:e2:be:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:F0:7C:8B:60:60:57:6C:31:9E:EC:F5:0C:5B:FA:F5:1B:D7:A2
X509v3 Authority Key Identifier:
keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9c:34:fd:3d:56:25:72:6d:0f:73:89:0b:88:69:c0:e9:c8:
7f:ac:08:e9:0e:c2:77:78:df:18:8e:64:61:aa:ca:bb:77:bb:
fa:b1:dc:36:7a:9a:ce:d8:eb:bf:21:d1:2d:eb:7b:97:f3:83:
4e:87:d0:00:9c:06:7e:1c:28:29:e7:23:28:9c:53:0d:8b:48:
52:bf:4a:ef:1e:95:e4:18:6e:01:5c:39:6d:b1:4a:b7:8c:9c:
bb:47:69:8d:41:b6:0c:07:10:ec:58:6b:8e:b6:1c:80:be:fc:
55:b2:0a:7b:b2:aa:62:76:8a:d3:20:ac:41:25:b1:c9:7a:39:
20:ec:76:c6:65:63:02:2d:e8:bf:28:0e:cb:b7:29:01:ed:49:
7b:46:42:4f:95:b3:f1:98:f4:09:7e:6f:db:20:db:56:31:91:
f8:c4:db:09:3b:14:32:e5:2b:e3:41:02:4b:00:bb:29:ff:65:
d4:65:d3:cf:b2:1e:65:b0:50:90:f1:4c:75:c5:68:ee:c8:97:
e0:8c:12:32:c6:dd:1b:68:82:a4:91:2a:99:03:f8:d9:0f:6d:
ea:cc:80:bb:3d:48:4c:2a:1d:22:a2:9a:c4:7b:b7:d8:da:61:
52:88:44:ab:b2:09:10:81:d9:c0:54:4c:08:d2:d0:2a:f9:98:
a9:01:9c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:44:01 2025 by rpki-client