Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: zMiOW/RYfg7W8PhjMZ6TJGpqSfTgci2FlQ9rxBl3IPs=
Subject key identifier: A1:4B:73:FF:D3:22:9E:8F:7F:0E:BE:C8:87:7B:CF:E3:9B:AF:6B:C3
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 0194BBCDFF3D48B808EAB545F0CFD8EC6C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: pn9Zsl/AHoPdH9tnbivd0JsF1UECmfG3YjmCqpJAZEI=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:3d:48:b8:08:ea:b5:45:f0:cf:d8:ec:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=a14b73ffd3229e8f7f0ebec8877bcfe39baf6bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:0e:ab:64:eb:01:fa:10:a3:f2:18:98:c4:
11:8a:15:ce:68:6b:8e:16:55:d7:07:5d:9f:bf:b8:
73:6e:a4:7f:f6:e1:dc:2c:8c:25:e2:ec:16:9a:8a:
60:fb:3e:9b:dd:7a:9d:cd:9c:ed:8c:d7:19:fd:72:
16:95:e6:2d:f9:5a:a5:4f:e9:79:33:aa:e7:e0:b1:
dc:2c:08:80:60:c8:7c:22:b2:6b:e9:22:7c:12:6e:
ef:7a:f7:51:72:2b:f7:f4:e7:33:49:2b:a9:22:39:
5d:a9:62:90:51:62:75:79:4a:dd:b3:b0:1e:82:f4:
bc:0e:24:2b:e9:3e:90:df:7c:65:92:2f:3c:83:0c:
b5:f9:9c:87:9c:7a:6f:e2:1b:b6:2f:cf:c5:3a:00:
73:33:30:64:b8:ff:e8:af:71:54:0a:70:cc:7a:89:
9d:34:52:cf:f6:1d:3f:d7:0a:9b:5c:2b:99:c3:a9:
0c:9d:c9:9f:92:84:4c:5c:2a:01:83:1b:89:70:1a:
f0:dd:f6:e1:30:b3:19:27:ef:9c:4a:81:29:2d:fa:
35:d9:7f:fe:0e:90:ec:5c:1d:74:3b:4c:9c:73:42:
a4:db:38:ad:10:66:c7:9a:5e:e3:1f:16:d6:d7:bb:
fa:18:2e:a1:e2:94:18:86:db:ee:76:10:99:2a:ac:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4B:73:FF:D3:22:9E:8F:7F:0E:BE:C8:87:7B:CF:E3:9B:AF:6B:C3
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:25:a4:0d:9e:01:6a:97:7a:2a:dc:f2:85:d1:44:00:52:de:
58:42:5c:83:02:5a:e0:f5:47:47:db:75:b5:c8:82:59:48:b2:
cd:ff:b0:5b:fa:41:6b:fc:ac:39:04:fb:86:6b:2d:e6:c7:f5:
a4:63:1f:02:62:f6:f7:b1:bd:05:1f:a5:c2:02:18:91:15:eb:
17:e6:a5:d2:9f:b4:96:4c:e0:a4:64:5e:22:b5:d2:f5:6a:f4:
b6:09:e3:f8:83:95:63:1b:4c:88:1d:4b:9c:57:6b:3e:c9:da:
9a:da:3e:0f:67:db:43:ec:72:e8:66:d7:b2:72:8f:2f:f9:0b:
bf:38:93:85:ff:76:ab:e0:17:76:66:27:a9:c5:a1:5b:e1:8e:
81:99:a3:a2:3e:41:5e:db:04:01:af:78:35:67:0e:c2:6d:d2:
0c:c7:e3:ab:80:89:ec:5e:3b:5d:be:72:3e:55:11:c2:f8:6b:
08:c8:67:40:03:94:dd:78:a6:e7:aa:29:30:32:1c:a4:a2:70:
79:9d:53:fc:8f:33:c2:1b:9c:bf:20:fd:71:4e:bf:cb:98:1e:
36:87:80:0a:ef:24:55:ec:2a:82:31:41:1e:aa:89:e3:27:2b:
c9:25:58:34:58:a9:86:d3:3f:05:ac:b3:75:0f:63:ed:e9:c2:
b6:92:38:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:59 2025 by rpki-client