Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier: UXPMWMgeCgorQC/YS179UCsTe/TE5u5qFnDd59hENp0=
Subject key identifier: D1:FA:DA:51:75:4F:F4:8B:5A:AA:B3:44:61:AB:CB:AE:95:51:84:C4
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial: 0194BD4EA2FADCB085FD473C27C8E6C0A203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number: 0745
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=)
2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: NoaunmYXUgaEkT2HDCDWAoDFKcKrMh5ooigv0+QooCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:fa:dc:b0:85:fd:47:3c:27:c8:e6:c0:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=d1fada51754ff48b5aaab34461abcbae955184c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:e9:35:4d:c6:00:fc:70:61:0e:e9:b5:f6:
92:b5:35:b1:5f:0d:79:7b:4c:3b:d1:a0:1f:0b:53:
07:a1:64:f0:71:24:3e:57:cf:08:41:85:39:59:0c:
e2:82:b7:60:9b:c4:3c:5c:1b:bd:4d:83:64:4b:18:
2d:63:05:ca:ac:db:10:9d:2f:e5:b1:72:d2:55:ba:
c3:d7:6a:a2:9a:55:da:d3:9a:60:f8:83:ee:03:8f:
76:db:e1:9e:da:20:8f:23:30:64:bf:92:cb:99:87:
c2:38:a0:14:37:ee:29:7c:70:12:c0:65:b7:f0:01:
6e:9b:01:49:25:43:01:ca:e6:a9:5a:7c:eb:77:ff:
b7:0a:1f:33:b7:cd:20:3a:38:0c:04:ba:fc:c5:10:
0a:9f:50:3c:18:68:76:25:d4:37:a9:96:26:d5:e9:
94:8f:db:6c:69:2b:dd:04:cf:79:9d:d1:a9:cb:87:
c4:56:c6:cb:d4:f6:da:6e:45:85:63:c3:77:f0:2e:
db:7d:8c:23:b5:b1:49:de:42:9c:ea:40:42:72:bd:
f8:53:94:b4:2a:09:08:6e:d4:7d:34:98:53:cf:db:
fa:5e:2f:79:44:04:11:ca:92:b2:a6:88:e3:42:b9:
a3:6b:0c:c1:b6:79:e2:72:0d:30:c7:27:cc:0b:d4:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:DA:51:75:4F:F4:8B:5A:AA:B3:44:61:AB:CB:AE:95:51:84:C4
X509v3 Authority Key Identifier:
keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:be:e6:d5:5c:ed:12:26:31:2b:ea:09:61:13:28:98:88:
5e:62:a9:94:39:d0:9b:af:5b:4c:6f:7a:7c:d7:63:2b:90:ba:
d0:29:87:c4:0d:8a:13:bd:16:e2:6e:05:13:f0:b5:c8:9c:d8:
c8:b5:72:19:a6:b6:a6:50:d4:ce:7e:8c:12:f6:e4:aa:8a:58:
d9:80:03:6c:5c:cb:46:dd:c3:f4:b0:be:65:3c:f1:f2:ed:9c:
1f:bc:80:7c:ad:7b:1f:90:eb:8f:68:fe:c1:50:1c:bd:75:20:
b1:42:76:c9:76:66:0e:94:02:81:c8:fc:45:65:73:bc:71:dd:
5f:be:17:20:6c:1c:aa:51:f8:e1:a2:f5:89:a1:ba:9f:6a:e2:
90:ae:60:5b:bd:10:2d:f9:a2:05:56:f4:17:3a:0e:3d:3b:b4:
cc:9e:5d:33:aa:72:c3:66:7f:0c:f5:ef:8a:21:a3:67:af:d7:
5a:c4:47:f8:5e:92:2c:f8:24:d2:85:a9:0b:03:c5:db:f8:8b:
ee:5e:9c:d4:f3:18:f1:7d:df:1d:20:9c:72:db:d1:f1:27:ac:
2d:99:cf:84:86:19:ab:10:11:82:ea:c1:75:7d:17:81:65:d0:
62:5b:3a:65:bc:92:6c:fc:49:57:cf:63:c4:78:e9:02:b2:4f:
79:ff:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:40 2025 by rpki-client