Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: kzv7CHKfY2HJgjwpRfUH9hjCDgxIPeNH2u2/81/pRI4=
Subject key identifier: 73:D0:F0:E3:EA:DE:BD:15:5B:12:B0:C9:32:82:90:F1:1F:60:1E:60
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 0194BC3C551F0D5D7DAFCB3B1B64832A209B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0A2A
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 2eQY5RUvYMN0PumsaNkXIMZR6sR46jyh1y+UEnXxKaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:55:1f:0d:5d:7d:af:cb:3b:1b:64:83:2a:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=73d0f0e3eadebd155b12b0c9328290f11f601e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:cf:3f:f3:5b:1c:42:02:60:4f:3c:10:d7:
95:33:9f:c5:12:00:af:2a:2d:18:52:85:47:7c:82:
cc:54:77:9a:5d:26:3a:0d:94:29:50:fb:de:c6:61:
08:8c:0a:18:49:c0:3e:0d:61:10:8c:e2:69:94:0d:
1f:95:14:02:6c:f1:c6:5e:a2:cd:68:03:ec:e7:19:
17:1a:b0:5f:f9:24:a6:f2:69:1a:b6:7f:23:93:09:
a3:09:28:2d:c2:78:e6:d4:5b:3a:83:58:a0:2d:d8:
07:dc:53:45:c8:c4:13:2b:cd:7a:c7:a8:1d:11:99:
23:17:bf:9e:de:fe:f9:3c:20:33:07:d0:7a:66:dc:
eb:2a:28:cd:d8:32:38:fc:fb:1b:e5:36:3f:6b:a7:
40:d5:48:72:a8:c2:3a:e8:0c:a7:81:87:46:47:f6:
8c:24:bc:5c:24:3c:47:8a:e3:1c:be:3a:29:d2:60:
38:44:f0:8c:2b:5e:dd:53:26:72:1b:35:b0:98:d3:
98:da:f6:72:11:fe:b3:3a:7d:9f:a8:bd:f8:17:cd:
b1:df:d6:a4:eb:0f:f2:7c:68:3f:66:46:6e:8f:98:
66:23:2c:7d:1c:4b:b4:42:57:85:5a:ef:fb:d0:2c:
18:30:a6:23:23:19:9c:50:1a:cc:f0:66:78:a9:4a:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:F0:E3:EA:DE:BD:15:5B:12:B0:C9:32:82:90:F1:1F:60:1E:60
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:7d:04:28:1d:fd:ce:65:b0:04:c0:db:8a:b1:bd:12:a0:
28:65:69:ba:a0:92:70:d4:29:e6:e2:b8:ff:a7:8a:74:17:a7:
3a:2b:a3:7f:82:67:58:54:15:85:ad:f8:db:09:95:08:31:33:
49:1d:13:89:05:1e:05:36:54:da:4a:25:9f:ca:0c:ec:d3:c4:
ba:b2:fb:fb:35:e4:2f:1a:30:61:26:dc:01:bf:4a:8f:48:f9:
1a:05:e0:c9:85:75:47:61:33:72:96:1d:b4:92:b8:d7:fc:b2:
7d:32:e8:af:87:4c:35:dc:51:f5:85:b2:49:f8:78:25:c1:1a:
44:27:65:a3:45:e0:30:7e:e8:4c:41:93:1e:32:75:de:0e:f3:
80:17:dc:24:a4:90:07:fb:45:3b:26:cb:df:77:23:ea:98:65:
09:4a:0e:ff:c4:46:9c:98:13:a9:63:f6:08:d8:79:77:3a:9c:
f9:29:69:a2:64:3d:22:ce:65:5e:fd:5b:77:62:54:06:5f:ee:
4b:74:c4:d0:53:1d:f0:98:54:ab:93:de:44:65:37:ee:b4:9e:
84:1c:09:6c:a6:e5:d2:73:fe:1d:86:41:7e:b3:8f:8a:14:5a:
f1:09:ff:be:1d:e0:04:f0:7c:62:28:35:47:24:7f:f3:7c:45:
a3:03:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:36 2025 by rpki-client