Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: JUotXKcSiLeifyH62+cqIf1JlpihONYki8m6NqjPk2M=
Subject key identifier: 47:45:1D:A5:A4:70:B4:5C:BB:E4:AA:61:93:52:88:FA:FF:23:D6:F6
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 0194BC3C1C1EAB339911963BB2A026BDAB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: FooaLSnmEc8jIz6Oq8KihKHSGq6aj0XeJPRb58N5Ecs=)
2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1c:1e:ab:33:99:11:96:3b:b2:a0:26:bd:ab:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=47451da5a470b45cbbe4aa61935288faff23d6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:26:0b:00:f7:ed:20:81:19:de:ee:c1:5c:
e8:e4:32:2d:86:40:46:f2:53:85:a6:f8:4e:ec:6c:
1c:53:db:be:82:fe:3c:64:22:75:49:59:bc:3e:ab:
7f:bd:64:ed:16:58:c0:ae:13:5e:60:cf:31:db:73:
de:bb:14:22:49:a8:3e:92:5a:ee:bb:bc:aa:4d:5b:
ba:6f:b5:56:77:7e:c2:ae:af:c7:21:25:6d:8b:ee:
f7:64:2c:82:39:83:55:46:86:76:c5:c5:da:d2:f2:
dd:cd:f0:0f:6a:81:a2:94:28:b9:48:98:0c:67:d1:
a0:9c:36:4f:26:3a:50:dc:75:55:9a:a8:81:bd:4f:
bc:56:a9:bc:ad:e5:46:04:e7:7a:3d:3e:e6:29:fe:
1f:9c:69:86:4c:d0:8e:98:85:87:41:e1:bc:f7:4f:
07:19:35:ac:2a:a9:03:77:20:46:a0:5f:b7:83:74:
a4:39:f9:45:b0:ee:9c:56:b2:ce:22:31:04:d4:19:
a4:85:7c:bf:fb:29:82:90:31:7d:91:b5:10:a8:57:
f5:1d:cf:bd:0a:d8:dc:5d:bb:8b:19:7e:76:96:b4:
51:5e:99:c4:c9:34:41:61:61:5c:db:14:3a:c0:f6:
f2:6e:33:b3:de:2b:2c:68:de:2e:13:14:82:25:ff:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:45:1D:A5:A4:70:B4:5C:BB:E4:AA:61:93:52:88:FA:FF:23:D6:F6
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:92:23:27:97:a0:70:09:7d:52:d8:bd:69:65:33:4f:cf:
f8:c1:ae:df:12:af:a6:81:8c:a4:a6:3e:33:c1:c6:98:51:8f:
37:11:04:a7:f6:5b:d0:2c:39:57:5d:01:7d:3a:f4:18:c4:8a:
40:58:f6:90:bf:19:c4:ae:59:5c:40:3d:17:19:9b:b8:d3:96:
ef:ce:7e:cd:e0:5e:46:11:7f:03:28:b3:88:72:9f:1c:f2:a5:
62:5c:bf:97:f6:9d:f4:dc:a9:ec:79:07:aa:99:7f:08:4f:fb:
7e:78:07:44:f2:93:f1:d5:f8:52:ad:1c:a8:59:20:35:ca:3f:
04:77:16:70:32:13:1a:29:71:27:c2:35:12:6e:2a:f2:52:70:
e3:78:08:52:c9:a2:5d:03:76:cf:5a:d9:fc:8b:9d:83:a4:f5:
69:9e:99:89:e0:15:85:f6:66:e5:bd:c0:89:21:df:d8:61:06:
1f:ae:63:93:68:06:b6:c7:94:13:c6:8c:d9:24:0c:ab:32:48:
ca:06:d0:21:8e:51:8f:65:fc:d6:ab:25:4d:db:e6:af:c8:1c:
d7:1b:dc:af:3d:00:e5:c1:7e:e6:d7:ab:31:8e:e0:bc:c5:05:
57:c0:37:08:eb:f3:9d:d8:41:b2:8a:17:97:4d:45:49:37:6f:
be:7f:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:34 2025 by rpki-client