Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier: NKW64IcrR46HqcIssEG9RRzB6EqgAeTLLOwMPho0ky0=
Subject key identifier: 80:56:09:DC:EC:98:5A:08:78:6B:EB:8C:EA:6B:1E:1F:6C:70:AD:22
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 0194BCA9C523005766A5B6F60C2746BC3FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: W+8q0d/ppERaOq89c9+Vjh16zhbAIPCvhd8PAi5S5eE=)
2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:23:00:57:66:a5:b6:f6:0c:27:46:bc:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=805609dcec985a08786beb8cea6b1e1f6c70ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:fa:09:b8:c5:eb:97:88:e2:b8:5d:09:a5:
a1:ce:81:e8:82:0e:ac:e1:5e:0f:60:b8:51:49:0b:
a9:7e:ad:0c:65:e6:81:8d:d5:5c:91:b9:3a:5c:74:
b7:0d:5b:89:43:21:04:c5:77:56:7b:b1:ad:5b:5a:
87:41:b7:1e:e0:f3:88:f7:2f:5c:da:d5:99:e0:0b:
2e:ea:6f:ce:00:af:39:5a:b9:f0:1e:35:53:1a:d8:
5f:d0:e9:a1:24:13:b5:1a:ab:57:4c:e1:25:a9:20:
08:8a:4c:42:23:5b:33:2c:ad:37:66:a2:b6:04:a4:
cf:c6:ed:f3:04:a3:d6:c6:85:03:de:be:c8:ec:c2:
aa:e2:83:38:6d:6f:82:6a:f9:8e:2d:7c:62:a8:72:
09:6e:62:52:3b:65:dc:f2:e9:5d:57:06:ea:07:bc:
67:62:69:c8:bd:7e:26:fc:40:bd:3c:a0:34:bc:4c:
8a:30:34:18:7d:22:9d:7c:bc:83:c8:e2:ab:ed:57:
2d:5f:3e:81:d0:16:67:5c:87:4a:c8:87:a6:e2:02:
72:15:ae:3c:b2:59:5b:19:75:04:fc:04:78:9f:2f:
3b:2d:d0:a3:83:9e:db:76:a2:69:5f:b8:54:b4:0c:
33:e4:ac:e7:08:94:60:20:4b:89:17:bd:d1:26:35:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:09:DC:EC:98:5A:08:78:6B:EB:8C:EA:6B:1E:1F:6C:70:AD:22
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f4:92:54:b0:20:e8:49:a2:5e:a1:7e:4b:31:c7:a9:2a:84:
12:4c:7a:2e:a2:87:92:b7:8c:b6:f1:32:92:a4:f1:32:04:c4:
d3:9c:2c:60:44:6e:e1:d2:ac:d8:dc:39:e2:46:fb:b3:73:66:
39:ae:92:b5:18:0f:97:07:df:d6:2e:e6:5e:24:47:50:83:26:
21:1b:9a:f1:39:38:08:3e:5f:45:22:df:07:97:5a:87:c5:a8:
8c:0b:6f:5d:64:c1:b1:0a:62:0d:f5:ce:a5:08:58:45:a5:89:
6a:21:f4:1c:cc:17:cd:ce:ee:3a:d6:78:80:cd:81:cb:95:82:
a3:69:ba:5e:55:6c:85:e0:71:be:23:96:5c:96:3f:67:a3:ad:
c0:bb:1d:ba:38:79:fb:55:30:dd:ed:e0:44:44:fc:87:40:c6:
d7:5f:e9:93:48:8c:6d:86:51:0c:0c:e6:96:10:11:7a:1b:dd:
ab:9a:ca:c7:65:4b:fd:56:04:dc:05:f7:a7:45:e3:f0:25:bf:
cb:54:c6:24:d0:30:25:b5:0d:03:68:f1:5b:dc:d8:20:a9:97:
04:99:2d:23:74:c4:d9:12:11:f5:da:7c:36:ab:11:e2:9d:b3:
44:ae:38:dd:ab:4d:76:46:c1:fe:f5:ce:68:bc:92:45:2c:69:
b8:71:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:44 2025 by rpki-client