
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: mVPaxH3F4aBcEuMVqZ1vs/IHCXIihaLs8p3La9JfkFA=
Subject key identifier: BF:A3:C9:D1:6D:C3:2F:3C:A8:A9:67:81:F0:6F:99:5A:D7:D1:7B:5B
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 0194BC729D213F66FCBB06E4479D1BBDEF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 0448
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: ZO2Unkr1mFE/QJGvwD2TqAWT9fTbRb7pkr31WJYQT6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9d:21:3f:66:fc:bb:06:e4:47:9d:1b:bd:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=bfa3c9d16dc32f3ca8a96781f06f995ad7d17b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:2a:db:80:04:8a:a7:89:4c:a9:d3:4f:49:
4e:77:f4:ed:64:42:53:f3:a1:d8:2f:74:7a:27:3f:
bf:08:6f:f0:27:d3:c7:9f:6a:8f:ac:e2:f8:29:b5:
ac:dd:86:a2:d4:c8:e3:33:ea:25:16:d8:78:c2:61:
be:09:b5:39:80:c2:ef:08:60:b1:23:84:76:23:8c:
01:42:81:6b:36:a5:e7:4c:9e:f2:e8:1b:61:86:47:
36:5c:b0:9e:b2:41:0d:dc:04:82:86:44:40:01:71:
55:e1:f8:1b:0c:e5:d7:0d:58:ea:76:ca:f6:9e:09:
3f:b0:f6:bc:a0:06:2c:b5:d2:ec:49:f4:cd:33:d8:
8e:a2:4f:e0:3d:f7:c7:ca:75:3e:1c:a5:1f:39:de:
93:8e:e0:aa:86:08:74:1e:23:f7:68:5b:77:f3:85:
c0:95:a7:41:6d:c3:34:2a:ce:46:d1:70:30:53:4e:
c7:65:ac:7c:5d:56:3f:3c:ba:e5:94:a6:9b:2d:2c:
1d:d4:72:ae:92:69:21:10:bf:4d:87:38:62:31:30:
14:54:06:e8:b2:c7:be:bf:e4:98:55:fa:3e:a4:7c:
2d:63:8b:6b:c2:4f:7f:1f:2f:61:61:da:24:ec:94:
24:51:31:d6:7d:38:7c:2d:4d:8d:d4:89:8d:af:54:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:C9:D1:6D:C3:2F:3C:A8:A9:67:81:F0:6F:99:5A:D7:D1:7B:5B
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:e4:c3:16:87:f5:49:3f:52:b5:1c:eb:9f:0b:2d:31:81:
49:f3:79:bc:a0:b3:b8:d5:f8:1f:a7:81:b1:84:a6:50:a4:69:
91:18:4c:54:b8:71:27:36:73:ed:4d:f9:b8:7c:46:0f:26:99:
5e:41:07:86:d7:58:67:18:83:bd:f2:51:51:07:9c:44:2f:6b:
84:70:af:8b:bc:29:11:59:82:a2:74:9c:f0:8a:75:80:3f:8c:
bf:10:95:28:a4:2a:dc:7b:12:90:36:18:e2:32:1f:81:ef:23:
4d:a8:55:c6:4b:50:1e:e8:6b:48:2c:6c:4d:78:d4:51:23:ae:
b2:24:98:86:68:64:72:1f:51:d3:7c:e0:1f:6e:1a:73:f0:31:
dc:ae:f9:83:7f:96:b6:98:a5:4e:2a:62:43:71:0a:59:f0:f2:
f9:f0:97:8a:a5:1b:e0:42:95:12:b5:6c:da:fd:bf:32:1a:ec:
f1:42:dc:c1:cf:d1:21:c4:f1:75:4e:fa:cf:eb:93:2d:75:2f:
78:b1:66:51:4e:53:e1:b1:b1:d7:c3:2d:d2:85:ae:42:d6:79:
fe:11:0e:d3:b6:13:8c:b9:c6:93:98:37:dc:d5:c8:0b:39:28:
5b:7e:2d:e3:e7:18:63:84:8a:29:71:9c:24:36:36:ac:6f:f9:
16:21:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:48 2025 by rpki-client