Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: TaeF5dE7j561Mrnz2ZmBfyKk5YTU1uFJj+oJGiqaqQ4=
Subject key identifier: 51:0D:71:32:CC:BE:76:13:90:FB:90:EC:DE:24:DA:E0:E2:04:3B:CF
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 0194BCA9B4310884A67B99813C739F23775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 0F82
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: voydxL9LiT3VCtl9YMPPfnpnMhk708Pnh1kDenUvK1I=)
2: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (hash: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:31:08:84:a6:7b:99:81:3c:73:9f:23:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=510d7132ccbe761390fb90ecde24dae0e2043bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:26:7c:f3:3b:91:e8:62:23:66:1c:ba:a3:
cc:1e:07:a5:02:75:4d:59:64:49:12:7f:7e:23:84:
e2:90:d8:6d:33:c4:2e:f6:c2:90:49:26:51:a8:a7:
c5:f4:e3:92:21:03:94:04:38:18:d6:fc:c3:eb:29:
0a:54:af:e0:7b:44:04:6d:3b:1a:d6:fe:74:55:8f:
4e:f5:36:a0:4e:15:f5:8f:e3:0d:dc:17:05:78:7f:
15:29:16:de:0d:29:ae:dc:80:29:67:6c:5c:62:ec:
91:08:50:7d:0a:d9:75:76:ec:08:ec:53:ab:63:43:
f1:bb:c3:31:e4:11:35:e8:a1:9a:84:a9:63:34:45:
e6:98:fc:56:c0:c1:f8:26:58:b2:fa:fd:a8:c8:99:
c2:e2:1f:08:0d:4e:99:2c:d3:75:80:4f:b3:a3:8e:
e4:16:4f:f6:2b:2a:aa:0e:50:f3:b0:e2:fc:63:cf:
02:16:4d:0a:27:bf:bd:a2:fb:7e:7d:ba:c4:ee:ae:
51:72:1d:d3:13:17:59:2a:f6:6f:f2:57:8f:41:9b:
87:ae:54:7d:50:b9:7f:ac:e0:ab:54:5d:c2:23:47:
66:08:d6:a7:58:6e:4a:ec:94:db:22:d2:f2:62:29:
3d:1c:e6:90:18:59:fa:c2:44:69:99:36:f7:c8:fa:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0D:71:32:CC:BE:76:13:90:FB:90:EC:DE:24:DA:E0:E2:04:3B:CF
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:78:06:76:d6:09:12:3e:57:88:ae:67:01:44:3c:eb:09:c8:
d0:b6:30:51:d9:53:ad:c3:61:49:3d:03:af:bd:25:62:3b:4c:
95:eb:f1:49:6d:f5:e5:4e:14:63:1f:eb:15:db:dc:34:7c:b2:
68:0d:a8:59:bf:f6:f6:4a:7c:5f:26:8b:f3:34:24:99:f3:db:
a2:38:90:c0:01:0a:80:13:4b:2d:e2:05:c0:25:75:8b:e9:ad:
e8:9b:80:7a:3a:e8:c4:7e:38:36:fe:fe:99:e3:59:23:54:5e:
dc:8f:65:de:ff:05:79:bd:39:20:dd:df:99:0b:07:a7:41:84:
70:f1:b1:0e:a6:0e:eb:43:d1:19:c6:7e:e6:46:3d:25:1d:25:
89:9e:93:f7:84:01:7e:16:23:35:c6:80:93:4a:51:60:59:33:
a5:44:f0:46:40:a7:cc:11:fa:d6:9f:3e:22:f9:cc:2a:2b:a4:
fe:f7:da:94:0f:31:5d:5e:85:e3:d6:67:7b:f1:85:10:c5:3a:
fa:e4:2c:c5:7e:e5:1f:ba:4d:7b:30:fa:38:9d:65:ce:5c:9c:
cd:4d:90:6b:f6:0b:71:7a:00:23:e5:e4:98:66:e2:a0:8a:54:
97:b9:65:d0:85:18:51:b5:41:94:bc:43:a7:96:f1:6a:78:2f:
13:b4:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:30 2025 by rpki-client