Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: e36haHVCG4Uz3d1TZH9ML1HB3vvQMBXzYufTvd+6sfw=
Subject key identifier: 16:DA:41:8A:EF:4D:3F:91:2C:0C:8B:AB:0D:4B:32:69:A1:9C:E5:A8
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 0194BBCE569F048A0BD410375E7BF7DAD3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 02DC
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: MyiIrJvme59rD/o3qlR8rzhD5zMSgxyAhSOkvFn6wqw=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:56:9f:04:8a:0b:d4:10:37:5e:7b:f7:da:d3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=16da418aef4d3f912c0c8bab0d4b3269a19ce5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:fe:5f:fd:86:7b:56:7b:9a:f3:ac:63:5c:
b2:9e:5b:50:40:95:0e:ab:4d:54:02:44:43:c4:ec:
25:48:f2:7d:ae:ae:da:f5:c7:71:bc:fb:0e:d7:a5:
a3:8d:07:62:48:84:5d:aa:64:42:bd:47:3c:bf:4e:
e2:44:3d:72:2d:36:51:4b:fc:15:07:d7:6c:b7:83:
b9:55:6a:1e:33:18:f3:c6:eb:0c:13:d2:2b:da:91:
69:ad:42:e5:b4:27:f0:64:e7:a7:47:f0:93:51:2b:
5e:36:63:78:aa:8b:52:aa:b4:fc:f0:24:73:a2:ea:
68:62:78:95:d2:d3:44:1d:8c:c5:57:d2:e1:77:8d:
b8:7c:6f:51:eb:79:c9:98:cf:da:e0:d0:59:8d:b9:
6a:34:26:dd:0a:11:fc:c2:f4:3b:e7:66:74:24:b0:
47:8c:4a:99:24:e6:ca:74:93:0c:88:89:66:55:f1:
78:7c:56:63:dc:bc:d5:93:c9:7e:5e:c1:37:70:0c:
ae:56:4d:eb:b7:2f:07:ed:a7:26:09:39:e6:71:17:
f8:4b:2e:78:d3:41:6b:70:25:da:02:62:cf:fb:2c:
7f:f6:9c:14:6c:a8:67:66:0a:36:14:12:19:0a:07:
3c:a6:75:3f:94:c1:d9:16:36:1f:61:71:34:d6:5d:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:41:8A:EF:4D:3F:91:2C:0C:8B:AB:0D:4B:32:69:A1:9C:E5:A8
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:4f:cc:17:6f:fe:9d:45:a5:1e:0c:5f:3b:66:56:bb:6c:
27:dc:b0:42:be:19:8e:1b:73:8e:6b:db:a8:be:44:3d:a6:51:
98:79:f4:ba:5c:da:02:89:61:25:ac:da:76:38:78:37:50:b7:
c0:4b:33:44:06:b3:9c:80:25:c0:23:3e:2a:b0:76:cd:b9:51:
84:2b:a3:08:d7:cb:dd:d1:5e:ec:ec:37:9d:b6:5b:b2:61:73:
67:9f:5f:76:d9:b4:46:3c:d6:88:5b:7d:46:b8:34:de:6d:6e:
4b:2d:bc:f0:ad:dc:26:60:94:e7:c4:e0:fc:50:7a:30:77:48:
0a:3d:d8:a4:1a:22:9c:aa:f5:e1:b1:ab:10:96:b4:c9:b0:69:
a6:80:69:0a:62:5f:65:d5:0a:40:03:1f:a0:8b:86:d7:29:91:
b6:fe:f1:58:92:8e:23:95:a0:37:2e:62:3b:31:33:5f:71:c6:
33:2b:11:81:4b:27:e9:1a:b3:cb:68:0b:ac:94:cd:3c:6b:6d:
94:7b:c8:f5:db:16:38:fd:13:43:71:96:35:d9:21:99:a1:47:
dd:3b:a5:01:5f:b2:b0:0a:d3:ad:80:80:71:c7:1c:98:64:ea:
bb:d2:16:7e:63:c6:f9:d1:02:22:c2:08:95:38:33:ca:f9:65:
68:fc:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client