Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: RDODsMBpA6W1/kVAkFGbhA60xp2w66/XNBcqYOIHTnI=
Subject key identifier: D7:0D:65:AC:7C:37:1C:64:AC:33:B5:BD:80:84:C2:30:E7:39:2B:F9
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 0194BD179A07E819CC7744B7788FBAE67497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: B5AL3XkjIO79/okDtoVoD9q3X+pcm3zkIDxihsvEpeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:07:e8:19:cc:77:44:b7:78:8f:ba:e6:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=d70d65ac7c371c64ac33b5bd8084c230e7392bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:6a:5b:57:29:49:62:88:8c:d8:93:97:20:
2e:26:cc:9a:85:d6:04:3c:80:13:f0:4d:86:59:34:
ab:0e:76:49:da:7a:5d:41:44:8d:57:1f:83:2a:87:
33:f0:2d:8c:cb:90:a8:70:c1:f1:36:19:13:6f:4d:
5d:e2:34:6f:2a:12:1a:d2:b9:dc:b8:12:b2:cc:24:
c2:e2:a8:ae:54:f2:25:f5:95:09:b8:12:b4:53:c8:
aa:24:75:b3:b3:72:48:37:34:c2:86:c1:f1:c1:d3:
6f:2b:2e:fa:b7:1b:d6:03:79:14:58:6b:9a:57:de:
23:13:a5:ae:17:8c:ed:59:9e:9d:c2:97:e3:24:6a:
f4:9e:ce:0c:7d:83:c7:af:9f:11:2e:ec:53:1c:e1:
ba:b2:9c:b4:f9:e0:9a:0b:b2:c3:fb:8b:45:5c:74:
90:49:e2:9e:81:bd:3f:dd:77:7d:30:fa:08:42:6d:
b8:8d:e1:08:e5:58:04:a3:a9:85:94:10:3a:7f:83:
05:19:7f:d7:79:f5:33:01:0b:e4:ab:70:e1:85:64:
da:a8:d6:f7:2a:a6:89:a6:18:ce:40:48:7d:9c:27:
05:86:7f:5d:56:e0:ec:aa:ba:2b:bd:48:66:76:48:
07:5a:23:45:3a:15:6e:94:35:91:7d:19:ff:18:76:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:65:AC:7C:37:1C:64:AC:33:B5:BD:80:84:C2:30:E7:39:2B:F9
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:2c:ff:ab:5f:fb:dd:75:b4:aa:98:af:2c:88:f6:73:b4:
39:e7:0e:4a:3b:da:5e:5b:8a:91:95:a4:b3:8a:08:05:8a:b5:
40:9a:f8:75:ee:ea:7d:86:ea:48:74:11:f6:54:f1:01:90:99:
57:92:35:f1:72:ae:f0:4f:e5:25:b2:2d:80:98:ff:fd:55:97:
e0:04:0e:e1:cf:44:86:43:9a:47:7a:ff:ba:8f:2f:b6:78:32:
cf:a5:66:7a:73:27:df:54:8a:64:99:6b:5d:4e:a8:33:e8:3c:
9f:76:0c:53:92:ab:c9:f9:40:f4:c8:35:04:8b:9d:a9:e5:f9:
05:6b:ca:f8:e6:1b:10:55:ad:51:b0:48:3e:9b:f9:89:64:42:
82:54:96:4f:e7:fd:f9:87:f3:91:eb:ca:5c:8b:c2:dc:08:13:
cc:c2:c9:43:61:0a:f6:3f:f0:83:c8:d3:f1:cd:27:1e:08:70:
4f:1d:02:05:21:87:e9:8f:5f:5f:fa:4a:76:7d:8f:12:fd:6a:
5c:00:c6:63:3d:9f:d0:ca:87:93:3c:81:fd:96:d1:f7:cf:51:
4c:4c:14:87:ce:3e:b5:a4:ac:75:f1:bf:b5:20:94:65:3f:20:
65:d1:8a:0c:73:2d:e6:6b:db:10:e7:fb:77:13:4b:1f:a8:72:
80:a0:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:34 2025 by rpki-client