Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: Hu0vv2rFpUMe8kKdPn1ExjsY1N1eYL/MoevssIG1KJw=
Subject key identifier: 58:3F:37:C0:C3:EE:4D:B3:7D:A3:CE:21:72:2D:14:DE:4D:AF:53:0B
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 0194BCE0F3B922DC6C2F32B7A643F08C60FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 15:00:46 +0000
Manifest this update: Fri 31 Jan 2025 15:00:46 +0000
Manifest next update: Sat 01 Feb 2025 15:00:46 +0000
Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: nes+4KyPEFA0RAMAmCUI4jSrd2p6bcyFSPlh/1OFMx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:f3:b9:22:dc:6c:2f:32:b7:a6:43:f0:8c:60:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jan 31 15:00:46 2025 GMT
Not After : Feb 1 15:00:46 2025 GMT
Subject: CN=583f37c0c3ee4db37da3ce21722d14de4daf530b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:54:fe:97:f4:a0:6d:50:62:5f:9d:44:83:72:
fe:4b:d8:81:f7:cd:34:7c:b1:10:a7:1e:9c:12:fb:
3c:3e:72:58:49:19:0a:26:6d:d3:a4:de:18:75:af:
e3:1c:34:1b:86:ab:cb:9e:12:0a:95:bd:5f:34:e1:
de:2e:af:1a:2d:7c:39:88:35:f2:5b:09:23:34:ee:
bf:45:8d:07:82:3c:c4:90:9b:64:39:37:3a:22:b1:
68:aa:49:4c:12:4d:bd:98:98:02:87:52:8d:56:10:
54:ed:36:db:e8:c8:69:6b:41:43:15:aa:20:89:ca:
94:11:1b:88:f3:3b:f5:01:7c:0e:12:94:ec:fd:77:
a2:6f:9b:c7:82:a1:d2:39:88:e4:12:f2:fd:71:19:
b2:8d:61:c0:c3:8c:3b:5d:03:84:e2:e9:59:94:54:
a0:7a:2e:38:68:d6:40:07:be:0d:dc:e6:33:a5:72:
ca:ca:5c:60:5a:ef:6e:4d:20:df:87:9c:cd:b9:de:
8c:08:06:be:16:c4:56:ae:c3:eb:f2:b7:ae:02:95:
5c:6d:8c:05:b6:65:28:c1:68:3c:9d:a6:e9:8e:cd:
96:3a:fe:92:0f:d3:63:a6:a0:5f:a5:c0:b3:2e:5e:
d7:bc:ba:22:c9:62:62:ba:92:9b:94:a3:62:87:80:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:37:C0:C3:EE:4D:B3:7D:A3:CE:21:72:2D:14:DE:4D:AF:53:0B
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:9e:03:bb:41:44:7d:cd:f8:98:a5:0f:db:26:7d:4f:30:
65:78:34:a0:a8:f6:11:28:84:9c:8e:62:25:43:99:bb:d5:36:
86:04:fa:4e:ad:99:0a:b1:4d:ac:85:d0:d7:51:60:b6:b6:59:
ea:8d:40:83:2b:4c:d7:66:cc:fe:c0:c4:23:2e:40:65:cb:22:
30:16:ab:5c:ed:f9:69:3e:5f:34:4d:27:82:45:94:f5:52:a9:
b8:9a:1e:bb:b7:fa:36:95:1c:3b:ee:c9:e4:1b:30:26:e4:02:
cd:f9:3e:c5:1c:15:0b:62:b8:ec:d3:bd:af:05:ae:bf:15:62:
85:a1:0a:3b:98:56:45:d4:2a:7e:ee:9f:79:5f:c8:67:bd:9b:
da:41:92:13:40:94:ec:d9:c3:ef:60:fe:61:21:4f:83:f8:4b:
10:c5:c0:a7:3a:72:fc:ed:41:78:d5:47:29:8d:e7:37:d5:8e:
f1:50:a2:ab:b9:9e:8c:a9:bb:d7:2e:3c:47:ee:3a:ab:71:1e:
72:37:1c:05:62:03:81:23:f5:c8:2c:e9:b7:1f:0a:3d:0e:56:
79:47:34:b6:b7:ba:fb:83:55:99:4f:e9:bf:e5:27:af:96:42:
55:d8:40:ca:3a:29:05:4f:d7:a2:10:2b:90:87:60:8a:54:bd:
be:f0:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:38 2025 by rpki-client