Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: KtZi7pHfKv98TTOkwuTOys7cGKtHVO8iXFzPWMHLH0E=
Subject key identifier: E0:15:3C:91:BE:08:32:CB:A7:13:2F:AF:F5:B0:5B:06:15:E4:FD:D2
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 0194BD858F2DF0663FDA83E31925C937B040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: hptvPpqqMU+bDszaYqX9Yoppifkqrlp1LH6j3yVuGIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:2d:f0:66:3f:da:83:e3:19:25:c9:37:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=e0153c91be0832cba7132faff5b05b0615e4fdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:76:6d:a7:9d:ce:5d:61:f9:f4:46:e8:9a:
29:cc:52:f8:94:bb:45:fc:13:7e:41:ec:18:9e:f7:
ad:5e:1e:b0:9c:c0:69:ed:19:9a:df:01:16:9a:5c:
3d:c1:6c:38:32:9c:13:54:ee:f4:92:2e:f9:07:a4:
7a:a6:51:0c:96:ed:9d:9f:99:ed:84:f4:20:89:28:
a3:66:49:95:95:f1:0d:53:67:84:58:75:54:56:04:
27:aa:ce:0d:48:eb:aa:81:0f:15:76:cb:e7:70:30:
ec:70:d1:27:29:0f:ce:20:82:dd:cd:03:2d:36:31:
82:fd:92:d9:63:06:b3:30:c0:92:c4:85:31:42:87:
0b:7c:9b:c1:36:20:b1:86:79:dd:d9:cb:d0:39:8b:
c8:83:86:ee:59:e9:8e:ec:a6:c7:6d:ba:31:4b:47:
5e:78:c6:32:8e:83:13:fb:6e:26:19:21:12:c0:39:
0b:1f:be:25:74:f4:42:56:c4:5f:60:00:bf:7b:de:
11:9e:7b:82:56:fe:91:eb:57:29:5d:41:9f:44:a0:
3e:31:cc:6f:b4:fe:91:1f:2d:19:8a:d6:79:09:75:
ed:f0:61:65:e9:10:74:69:78:ef:39:99:25:96:35:
29:b4:d0:87:08:e3:94:31:c1:0e:92:95:a4:b3:8d:
d9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:3C:91:BE:08:32:CB:A7:13:2F:AF:F5:B0:5B:06:15:E4:FD:D2
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a7:05:20:9a:aa:67:7d:07:e1:3f:0c:a8:0e:ee:2e:05:56:
db:27:7f:3c:3b:16:a0:99:b2:89:5f:60:93:eb:67:1a:b2:5c:
fc:8d:cf:16:ff:62:31:e7:d9:a1:33:70:31:a6:03:ee:2a:48:
af:4b:00:ae:fc:1b:bd:64:6a:68:e4:eb:5e:54:58:34:c8:82:
12:48:c7:6e:63:3f:fb:77:1f:da:73:6e:58:3b:b0:cc:d5:46:
dc:ba:4e:04:14:74:da:73:bb:28:fd:a3:29:ad:05:92:e8:e1:
b5:8b:3c:76:3a:0d:f0:cb:bc:3d:f2:07:ba:03:7b:1a:90:da:
92:b7:a5:00:e9:43:1e:cb:e5:77:6d:44:6f:72:36:49:98:46:
4d:de:7d:cd:d1:83:ef:6b:31:3b:b8:ba:5c:d8:75:f9:09:7d:
dd:c7:94:1d:c1:e3:61:5c:cf:d5:79:2b:ae:6d:c0:21:a7:ce:
aa:fe:b3:e2:86:cc:92:05:fe:1c:ee:4d:03:04:0c:7c:94:af:
0a:ae:a2:ed:b7:94:38:ef:35:fd:53:05:17:c5:7c:85:f4:43:
72:a5:f4:f1:de:d3:5a:ba:ff:d4:a8:02:41:82:18:1d:83:e7:
6d:14:a4:fe:3b:19:b0:3e:3b:dd:23:fe:12:95:63:3c:d5:96:
8b:1b:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:43 2025 by rpki-client