Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json)
Hash identifier: rU31DGWJFzEgnHGZxyScHdavfzNNmUjbAEBNiwIrp3M=
Subject key identifier: B3:34:82:32:B1:5F:F9:F1:32:D8:50:6B:F8:A8:3A:8B:E7:6B:B9:E2
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0194BC04B2ECDE3825E4E677AD3ED3CFB99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
Manifest number: 0B53
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: Nss2kO7vwED_lH6zuq8RSrb2rfE.roa (hash: 1BGYAn5SxYs9ABF+oBM6hfDnitlaPkyQv+8E/VsOmZ4=)
2: XsLjp43XqVLOf-UiZTsjZx3E54g.roa (hash: xErYg38+N/tFwn9w696LSX/zjDpD0mxUiTuXvg0H92I=)
3: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: ygeAKHVtKptIJb+0k9E9ZYPmxxpyk8039gJv20bMeuY=)
4: lHOT3YU_9vjKOSliZQ6pQChkT-g.roa (hash: fbKlL5tCwAQLvmmUtOHcWxhT3UbXzvOEjpyh3jzzGYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b2:ec:de:38:25:e4:e6:77:ad:3e:d3:cf:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=b3348232b15ff9f132d8506bf8a83a8be76bb9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:27:fb:f0:11:c1:5b:91:bc:4e:26:cf:a6:
4b:83:13:b5:fa:4c:68:77:09:37:22:c8:69:ec:aa:
4e:db:87:6f:7e:0a:cd:14:42:ec:85:d1:af:cc:99:
5e:86:2f:94:b4:19:65:30:87:3e:05:44:77:cc:65:
76:6c:e8:fb:ba:c4:f6:30:71:39:a9:d3:5e:2b:5d:
e3:87:77:04:43:69:ca:a7:90:40:78:6a:d9:4f:d4:
88:df:13:90:51:36:c7:d2:b2:0b:e5:49:2a:26:bc:
d1:0f:ca:1e:4d:b9:91:8e:0f:65:e2:4a:14:f6:35:
33:da:47:22:38:f2:51:0f:5c:54:dc:0a:40:87:d8:
ad:6d:45:9b:71:71:9c:e2:23:da:2b:e8:a7:fc:01:
c4:e8:1f:a1:39:9d:cf:0b:a5:4d:f2:9c:47:72:57:
7c:dd:e6:d4:24:42:6f:7f:c7:c6:b7:43:92:83:4a:
d0:82:03:e9:16:b2:b6:08:32:88:ea:04:27:fc:40:
b2:04:f9:dd:77:fb:0e:0e:2b:1a:4a:28:79:31:fb:
e9:d8:11:98:5c:51:9e:a8:49:e1:92:cd:c0:92:f0:
0e:1e:ce:91:2a:71:1a:4a:6a:de:64:4c:f8:18:a3:
e7:7d:2d:db:74:bc:55:eb:a9:02:76:ff:70:f1:6b:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:34:82:32:B1:5F:F9:F1:32:D8:50:6B:F8:A8:3A:8B:E7:6B:B9:E2
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f8:d0:c2:86:7b:76:06:7b:b7:7e:5b:a9:c4:ad:6d:c1:e0:
58:34:b5:72:28:1a:ce:e9:78:94:fd:cf:4e:1a:2b:58:91:88:
e0:4a:fa:5b:e1:cd:29:b6:81:9d:de:5d:73:c1:34:ce:cf:f9:
45:1a:e3:e4:02:f3:31:6a:76:f0:50:34:e2:d2:07:48:2f:af:
9e:f9:e2:7a:21:98:fe:fa:84:b7:f7:14:5f:df:62:2b:30:a3:
ab:fe:08:a9:7a:56:47:96:c6:aa:bd:4b:b5:24:fc:bf:39:bd:
3a:bf:ee:1f:82:62:e0:a7:52:b2:51:47:9a:da:be:e5:06:ea:
02:88:c7:4d:d1:99:b1:4d:0d:da:f4:0b:17:71:cb:1b:bc:b9:
9d:e3:40:d0:73:03:1f:f4:e4:0e:b8:98:a8:6a:ac:06:e1:6a:
c0:5a:dc:5d:b4:fd:e5:b8:5e:a2:d9:c6:97:df:8d:b4:63:49:
2a:79:da:79:2e:26:70:55:d6:77:11:92:39:44:48:83:42:e8:
a3:a5:1b:6b:44:52:ce:a3:fe:04:31:1e:fc:bb:70:a1:20:d1:
20:a5:b7:f3:6f:a7:a4:23:94:46:94:2d:16:1c:a2:e6:24:67:
4f:52:5e:e5:31:6e:59:09:ce:e9:3a:dd:79:47:e9:b8:2d:ea:
bc:c4:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:05 2025 by rpki-client