Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: rb9W6lrut0IEPrese2KN6/MHe0Y6mvDA+Jkd36EV9VI=
Subject key identifier: C7:7E:0E:83:8E:22:B7:61:BE:D1:BE:4F:DA:81:2F:A8:41:77:F2:20
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 0194BC04A1167FD311C9FFF9E39459CA523C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 07F1
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: NHSj5-Yzjl_G54ZTpMeucpCreEE.roa (hash: 73hYRgtKvWog8Vk82S08EnVKEzRxqZ541a3SgWfwbp8=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: HxneoRVzbDABZepc/KCOHaUj1WX2JA8EUS2vGId/uww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a1:16:7f:d3:11:c9:ff:f9:e3:94:59:ca:52:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=c77e0e838e22b761bed1be4fda812fa84177f220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:a9:bf:1c:0f:55:24:d6:fc:49:20:ae:59:
29:fe:f1:68:a6:30:7d:fc:05:6d:d7:66:30:99:e8:
97:ab:ac:cd:2e:a5:b7:0d:6a:28:8a:ea:65:c5:07:
ce:8a:da:4b:cf:b6:32:5d:1a:ca:fd:3f:01:d1:eb:
db:a4:30:52:18:80:4d:e5:b5:ec:45:0f:4f:4a:4b:
a5:15:83:04:89:4b:5d:b4:33:0b:60:97:86:e0:a6:
fd:6c:64:53:b8:09:ae:af:cc:f1:e8:d5:70:02:ae:
75:6c:5c:cd:21:b8:1d:a1:b1:e0:82:9c:e9:cb:9f:
33:ae:4f:d7:eb:77:c5:de:4d:2a:38:fa:36:54:74:
69:82:8e:c6:73:7d:66:e9:08:4f:d5:c7:17:94:a0:
9d:ee:0b:81:b5:34:84:7c:db:ec:86:3a:ac:49:6d:
31:8e:15:0b:bb:72:ef:d5:9b:ac:96:ec:0f:64:6c:
31:03:df:8e:ad:91:31:79:97:74:e2:47:28:be:14:
b1:0a:70:5c:cd:38:b0:bb:43:24:f2:db:07:11:c9:
bd:55:73:6e:d4:f7:98:f8:bd:9e:53:d0:57:77:38:
9b:2f:07:a2:6b:f0:98:db:17:9a:4c:33:f3:b6:fd:
45:f3:ac:74:bb:be:a7:f7:24:ce:a9:99:75:7e:ba:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:0E:83:8E:22:B7:61:BE:D1:BE:4F:DA:81:2F:A8:41:77:F2:20
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9a:93:9a:db:3a:1a:3a:e8:f9:70:a0:65:08:f9:c0:ad:65:
c8:21:6f:b5:13:dc:af:0a:b4:a6:26:ec:73:a1:c3:e5:10:ff:
86:41:dd:21:5c:69:9b:61:1c:0c:3c:64:ad:3c:1d:e9:15:92:
84:33:92:bb:de:bf:90:99:39:79:09:23:1a:82:0a:b8:6b:96:
e9:1b:cc:3f:df:53:0f:4d:75:a7:5c:8c:a0:af:4b:5e:b2:ef:
e8:af:a4:ce:1e:2e:f8:42:8a:d2:7c:ff:23:54:6a:1a:57:d6:
cc:50:5b:a3:b5:ac:06:0d:1b:7e:99:d9:45:e0:e8:c4:90:d5:
55:e3:0b:e8:ba:bc:a9:41:b1:27:71:a6:e0:7c:64:28:be:81:
d2:61:0c:29:1c:40:c4:37:a9:e6:e1:0d:ac:ee:9d:49:0d:40:
ce:a1:c1:3e:e2:20:69:c7:77:61:9e:ed:d1:13:4f:a1:d6:09:
96:f7:36:f2:4b:06:b1:1d:cd:86:2a:87:53:83:05:a7:53:c1:
71:20:cb:01:46:b6:54:97:9f:8a:dc:5e:68:cb:2c:b0:8f:3b:
cb:3e:03:fb:85:36:85:38:61:e3:d2:86:22:1b:05:e8:cb:80:
48:28:c5:d3:fe:25:9a:dd:2a:25:1b:24:bf:05:77:5a:3c:55:
fe:3b:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:44 2025 by rpki-client