Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier: TOmpXs83/sbmINDEkckPUFjHY9DqiXtXzvnqR5Wgr/k=
Subject key identifier: D4:29:DA:AF:BE:54:3F:0C:75:74:6D:0D:16:C8:C9:B1:B6:81:32:78
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 0194BBCEEA471C89A98EA90A35370568071B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=)
2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: VedqJG7gH0heIBylp4KXY7qHvQDBuLWtl5XJ6178yPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ea:47:1c:89:a9:8e:a9:0a:35:37:05:68:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=d429daafbe543f0c75746d0d16c8c9b1b6813278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:c2:6f:78:5f:76:95:14:9a:8d:69:ff:f3:
52:a6:58:81:64:e3:41:06:28:eb:95:94:52:a1:02:
a8:3f:5b:74:2f:e6:96:e7:e0:66:b0:02:ab:ba:00:
9b:12:67:87:f4:bc:ec:66:8c:f1:ea:b0:f2:9c:47:
2c:71:6a:62:2d:ca:dc:43:a3:b0:c5:19:25:e8:ed:
2f:7f:f3:d3:8d:31:e7:f6:db:39:c2:ab:fa:5f:ec:
b7:73:65:93:03:08:83:7a:90:96:83:15:f7:2f:3f:
8b:6c:69:e9:54:0a:c0:67:6c:06:8e:c0:42:9b:6b:
80:e9:c7:b3:f2:87:60:e8:24:fa:9e:1d:fc:90:d3:
26:fc:8e:f6:c4:c4:a0:92:c5:38:20:e8:d0:74:a0:
e9:23:29:bc:8a:58:12:2d:5c:a9:3b:76:a1:5c:93:
84:47:97:ed:c2:bc:2a:2f:30:c5:ae:77:5c:2f:98:
3b:74:c2:2b:c9:14:5b:03:9a:b5:96:50:fd:b8:da:
0d:e7:7d:d5:18:16:b6:26:eb:15:e4:2e:6e:74:dc:
b9:49:66:b7:82:99:e1:64:55:b1:88:7e:61:ce:27:
6a:ad:00:8c:4c:44:83:f5:d4:7b:59:d2:76:a2:27:
04:26:5d:6d:c1:f7:1c:a7:5c:fa:8b:a1:c3:72:17:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:DA:AF:BE:54:3F:0C:75:74:6D:0D:16:C8:C9:B1:B6:81:32:78
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ea:4c:bd:4a:c1:39:b7:0d:3c:0e:11:fe:07:1d:05:5b:60:
87:22:39:46:4c:57:84:29:52:c7:ff:a9:8e:97:79:32:af:72:
1a:b5:76:41:25:e6:e3:68:de:09:f9:2c:ac:e8:9b:ac:fc:38:
93:16:47:ee:82:cf:56:27:c6:22:1b:d9:93:23:21:e8:13:de:
10:00:eb:b6:06:fb:f5:a8:46:67:ad:cd:aa:5e:c2:58:a7:9d:
8d:e9:69:ea:c9:56:0d:b1:43:f3:4e:1d:f1:16:e7:66:af:47:
88:14:3c:ec:06:83:65:87:d0:ca:b2:69:8c:fe:b7:35:66:93:
05:ed:05:bd:70:dd:f3:06:d0:6c:fc:d7:fe:21:da:24:74:76:
d8:13:b1:b8:0f:a3:ab:f8:d4:05:a9:29:23:78:6f:e0:dc:ab:
ce:cd:ba:92:3a:3d:99:16:2e:39:0c:18:91:fb:35:17:d5:a5:
d6:a2:92:be:5d:05:49:d8:dc:67:a7:59:5c:df:bb:00:2e:77:
c5:55:18:61:5b:34:c3:f9:5e:b3:44:30:7e:c5:86:54:3e:65:
b8:02:40:a9:6f:40:8d:45:13:88:4b:f1:3c:1d:27:da:3d:db:
09:f8:ec:20:64:45:d6:e3:c8:19:27:24:a2:c2:47:91:b6:e0:
2a:f3:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:35 2025 by rpki-client